Back to changelog CodeQL is the static analysis engine behind GitHub code scanning , which finds and remediates security issues in your code. You can now define custom sanitizers and validators using data…
Back to changelog GitHub moderators can now classify hidden comments as Low Quality , a new option in the Hide comment dropdown menu available across issues, discussions, pull requests, and commits. Previously, the…
Back to changelog Workflow execution protections are now in public preview for GitHub Enterprise, organizations, and repositories. This new capability lets enterprise administrators define an allow list that controls who can trigger…
Back to changelog GitHub repository rulesets now support two frequently requested features: adding individual users as bypass actors and renaming branches covered by organization rulesets. Add individual users as bypass actors You…
Back to changelog This week, we’re rolling out several improvements to secret scanning and public monitoring: Resend is now a GitHub secret scanning partner. Secret scanning now detects new secret types…
Back to changelog Since our last pattern update , we’ve expanded secret scanning’s detection coverage with new partners, more patterns blocked by push protection by default, additional validity checks, and richer…
Back to changelog GitHub secret scanning continually updates its detectors, validators, and analyzers. Here’s what’s new. Nine new secret detectors from seven providers, including Langchain, Salesforce, and Figma. Secrets from…
Back to changelog The rule insights dashboard is now in public preview at the organization level. You get a visual, high-level view of how GitHub evaluates and enforces your GitHub repository…
…GitHub Copilot Business copilot Apr.21 Retired Deprecation of security-related organization API fields application security supply chain security Apr.20 Retired Changes to GitHub Copilot plans for individuals copilot Apr.20…
Back to changelog Today we’re shipping two updates focused on supply-chain security for npm: Staged publishing is generally available. New --allow-* install source flags ( --allow-file , --allow-remote , --allow-directory…