Attacks on Maven proxy repositories
Learn how specially crafted artifacts can be used to attack Maven repository managers. This post describes PoC exploits that can lead to pre-auth remote code execution and poisoning of the local artifacts in Sonatype Nexus and JFrog Artifactory. The po...
How we evaluate models for GitHub Copilot
We share some of the GitHub Copilot team's experience evaluating AI models, with a focus on our offline evaluations—the tests we run before making any change to our production environment. The post How we evaluate models for GitHub Copilot appeared f...
How we evaluate AI models and LLMs for GitHub Copilot
We share some of the GitHub Copilot team's experience evaluating AI models, with a focus on our offline evaluations—the tests we run before making any change to our production environment. The post How we evaluate AI models and LLMs for GitHub Copilo...
Supporting the next generation of developers
Here’s your opportunity to empower the teen in your life to get a start in open source development. The post Supporting the next generation of developers appeared first on The GitHub Blog.
GitHub Availability Report: December 2024
In December, we experienced two incidents that resulted in degraded performance across GitHub services. The post GitHub Availability Report: December 2024 appeared first on The GitHub Blog.
How we built the GitHub Skyline CLI extension using GitHub
GitHub uses GitHub to build GitHub, and our CLI extensions are no exception. Read on to find out how we built the GitHub Skyline CLI extension using GitHub! The post How we built the GitHub Skyline CLI extension using GitHub appeared first on The GitHu...
Git security vulnerabilities announced
A new set of Git releases were published to address a variety of security vulnerabilities. All users are encouraged to upgrade. Take a look at GitHub’s view of the latest round of releases. The post Git security vulnerabilities announced appeared fir...
Game Off 2024 winners
Secrets spilled, discovered, and hidden again—Game Off 2024 brought over 500 jaw-dropping submissions that redefined creativity in gaming. From cult quests for free furniture to spellbinding mysteries, these games will have you hooked. Ready to uncov...
Highlights from Git 2.48
The open source Git project just released Git 2.48. Here is GitHub's look at some of the most interesting features and changes introduced since last time. The post Highlights from Git 2.48 appeared first on The GitHub Blog.
How to secure your GitHub Actions workflows with CodeQL
In the last few months, we secured 75+ GitHub Actions workflows in open source projects, disclosing 90+ different vulnerabilities. Out of this research we produced new support for workflows in CodeQL, empowering you to secure yours. The post How to sec...
GitHub’s top blogs of 2024
Explore GitHub’s top blogs of 2024, featuring new tools, AI breakthroughs, and tips to level up your developer game. The post GitHub’s top blogs of 2024 appeared first on The GitHub Blog.
Announcing CodeQL Community Packs
We are excited to introduce the new CodeQL Community Packs, a comprehensive set of queries and models designed to enhance your code analysis capabilities. These packs are tailored to augment… The post Announcing CodeQL Community Packs appeared first ...
