AI coding assistants are becoming wildly popular, with the vast majority of respondents in GitHub’s latest poll saying that ...

GitHub Secret Protection and GitHub Code Security will extend access to advanced code and secret scanning to organizations of ...

Just as with human-generated code, rigorous testing must be applied to AI-generated code. “Developers should still carefully ...

More details have come to light on the recent supply chain attack targeting GitHub Actions, including its root cause.

Learn GitHub basics with this beginner's guide! Master repositories, branches, commits, and pull requests to streamline your ...

GitHub’s Product Security Engineering team secures the code behind GitHub by developing tools like CodeQL to detect and fix ...

Gemini Code Assist is an AI coding assistant developed by Google and powered by the Gemini 2.0 model. It provides real-time code completions, assists with debugging, and generates entire code blocks ...

CVE-2025-30066 supply chain attack compromised tj-actions on March 14, 2025, exposing 218 repositories and leaking credentials.

Data Exfiltration Capabilities: Well-crafted malicious rules can direct AI tools to add code that leaks sensitive information while appearing legitimate, including environment variables, database ...

GitHub Action tj-actions/changed-files was compromised, leaking CI/CD secrets. Users must update immediately to prevent ...

A cascading supply chain attack that began with the compromise of the "reviewdog/action-setup@v1" GitHub Action is believed ...

A widespread phishing campaign has targeted nearly 12,000 GitHub repositories with fake "Security Alert" issues, tricking developers into authorizing a malicious OAuth app that grants attackers full ...