…code scanning , which finds and remediates security issues in your code. We’ve recently released CodeQL 2.25.2 , which brings a new Kotlin version update, various accuracy improvements, and a set…
Back to changelog CodeQL is the static analysis engine behind GitHub code scanning , which finds and remediates security issues in your code. We’ve recently released CodeQL 2.24.3 , which adds…
Back to changelog CodeQL is the static analysis engine behind GitHub code scanning , which finds and remediates security issues in your code. We’ve recently released CodeQL 2.25.3 , which adds…
Back to changelog GitHub secret scanning continually updates its detectors, validators, and analyzers. Here’s what’s new for March 2026. 28 new secret detectors from 15 providers, including Lark, Vercel, Snowflake…
…This was due to Redis infrastructure updates that were being rolled out to production to improve our resiliency. These updates introduced a set of incorrect configuration changes into our Redis load balancer…
…During their session, they pulled back the curtain on how GitHub applies AI to streamline remediation and make alerts easier to interpret—then pushed the story forward into what comes next: AI…
…New exclude_secret_types API filter New secret types are frequently added to GitHub, which means organizations using inclusion-based filters in their reporting and remediation scripts have to manually check for…
…This added specificity makes the data more actionable for triage, prioritization, and remediation. To find out how to filter Dependabot alerts by CWE, see our documentation on auto-triage rules . How to…