Back to changelog CodeQL is the static analysis engine behind GitHub code scanning , which finds and remediates security issues in your code. We’ve recently released CodeQL 2.25.2 , which brings…
Back to changelog We’ve updated the GitHub Code Quality experience to make it easier to navigate and triage findings across your repository. GitHub Code Quality standard findings help you detect potential…
Back to changelog We’ve extended the Credential revocation API to support additional token types, enabling you to programmatically revoke any exposed credentials found on repositories or elsewhere. This helps you quickly…
…What stays the same Our commitment to rewarding real security research isn’t changing. We’ll continue to pay out quickly, communicate clearly, and treat researchers as the partners they are. Reports…
Back to changelog GitHub Actions now issues read-only cache tokens to the default branch for workflow events that can be triggered without write permissions to the repository. This applies least privilege…
Back to changelog You can now restrict who can dismiss pull request reviews directly in GitHub repository rulesets. This capability is generally available and gives you precise control over who can clear…
Back to changelog This integration is now generally available. Since entering public preview , we’ve heard valuable feedback from customers, and we’ve shipped follow-up improvements that bring artifact and runtime…
Back to changelog Organization administrators can now enable or disable GitHub Code Quality across all repositories in their organization with a single toggle, instead of configuring each repository individually. What’s new…
Back to changelog You can now receive Dependabot alerts when your repositories depend on npm packages with known malicious versions. When you enable malware alerting, Dependabot matches your npm dependencies against malware…
…Jun.09 Release Dependabot version updates now support the Deno ecosystem supply chain security Jun.09 Retired Upcoming breaking changes for npm v12 supply chain security May.26 Release Dependabot version updates…