The latest blogs from GitHub

Put native GitHub features to work to review outside collaborator access and archive stale repositories.

In September, we experienced two incidents that resulted in degraded performance across GitHub services.

Our new repo star history API now provides trends without returning individual identities or requiring unbounded database work. These are the engineering tradeoffs we made.

GitHub’s context-aware secret classifier improves detection quality, raises weighted acceptance by 11.5%, and reduces median scan execution time by 86%.

The barriers to building software have collapsed. Today, anyone can build. Hackathons are a great place to start learning.

As we kick off Cybersecurity Awareness Month, the GitHub Bug Bounty team spotlights @vaib25vicky, exploring their methodology, techniques, and experiences hacking on GitHub.

Developers aren’t becoming more careless; they’re being outpaced. The tools that let developers create more software should also take on more of the work of protecting it.

We’re rebuilding GitHub’s Git infrastructure while GitHub keeps running, creating a foundation for agent-scale software development.

We’re launching ReviewBench, a benchmark for code review agents built on representative GitHub pull requests, multi-source ground truth, calibrated evaluation, and production-aligned metrics.

Learn to direct AI agents, critically review their output, and keep technical judgment at the center of your workflow.

From verifying AI-written code to securing npm dependencies, these are the sessions I’m building my Universe agenda around.

Explore GitHub’s latest transparency data and learn more about policy updates affecting developers and open source.

A look at the targeted AI taskflows behind these findings, the critical Android bugs they uncovered, and how to run the same open-source agent on your own app.

The open source Git project just released Git 2.56. Here is GitHub’s look at some of the most interesting features and changes introduced since last time.

How we fully migrated github.com away from CSS-in-JS.

What is a developer to do when they need something more tangible than a chat box? Enter canvases.

In this blog post, I explain how to use the new fuzzing taskflow based on the GitHub Security Lab Taskflow Agent AI framework.

How we rebuilt the diff surface in the GitHub Copilot app to open a million-line pull request with hundreds of inline review comments.