… Aug.13 Improvement License data quality improvements supply chain security Aug.04 Improvement Customize Dependabot pull request branch names supply chain security Jul.31 Retired Restricting npm bypass-2FA granular access tokens supply chain security Jul.30 Release Reference same-repository actions …
… How a top bug bounty researcher got their start in security For this year’s Cybersecurity Awareness Month, the GitHub Bug Bounty team is excited to feature another spotlight on a talented security researcher — @xiridium! …
… Jul.01 Release Secret scanning public monitoring for enterprises application security Jul.01 Improvement Secret scanning adds validators for Asana, IBM, and MessageBird application security Jun.30 Improvement GitHub code coverage merge protection for pull requests application security Jun.30 Improv…
… We’ve written a few times about our plans for hardening the supply chain: Our plan for a more secure npm supply chain in September 2025, Strengthening supply chain security: Preparing for the next malware campaign in December 2025, and What’s coming to our GitHub Actions 2026 security roadmap in Ma… …
… Tags: CI/CD GitHub Actions supply chain security Written by Principal Product Security Engineer Senior Product Manager Related posts Company news An update on GitHub availability Here’s what we’ve done—and what we’re still doing—to improve our availability and reliability. …
… Tags: Dependabot supply chain security Written by Carlin is a Product Manager at GitHub working in GitHub Advanced Security, with a focus on Dependabot. …
… Alexis has 20 years of experience defending critical national and private sector networks, spanning positions with the Department of Defense and the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency CISA . …
… What’s coming to our GitHub Actions 2026 security roadmap A look at GitHub Actions’ 2026 roadmap, outlining how secure defaults, policy controls, and CI/CD observability harden the software supply chain end to end. …
Featured What’s coming to our GitHub Actions 2026 security roadmap A look at GitHub Actions’ 2026 roadmap, outlining how secure defaults, policy controls, and CI/CD observability harden the software supply chain end to end. …
… Changes to how we reward low-risk findings Not every valid submission represents a meaningful security risk. Some reports identify hardening opportunities or documentation gaps that, while not exploitable, still lead to improvements we choose to make. …