Releases now expose digests for release assets - GitHub Changelog
BackAI & MLLearn about artificial intelligence and machine learning across the GitHub ecosystem and the wider industry. Generative AILearn how to build with generative AI. GitHub CopilotChange how you work with GitHub Copilot. LLMsEverything developers need to know about LLMs. Machine learningMachine learning tips, tricks, and best practices. How AI code generation worksExplore the capabilities an
Dependabot reviewers configuration option being replaced by code owners - GitHub Changelog
BackAI & MLLearn about artificial intelligence and machine learning across the GitHub ecosystem and the wider industry. Generative AILearn how to build with generative AI. GitHub CopilotChange how you work with GitHub Copilot. LLMsEverything developers need to know about LLMs. Machine learningMachine learning tips, tricks, and best practices. How AI code generation worksExplore the capabilities an
GitHub - bahdotsh/wrkflw: Validate and execute GitHub Actions workflows locally.
TUI Interface: A full-featured terminal user interface for managing and monitoring workflow executions Validate Workflow Files: Check for syntax errors and common mistakes in GitHub Actions workflow files Execute Workflows Locally: Run workflows directly on your machine using Docker containers Emulation Mode: Optional execution without Docker by emulating the container environment locally Job Depe
How the GitHub CLI can now enable triangular workflows
Most developers are familiar with the standard Git workflow. You create a branch, make changes, and push those changes back to the same branch on the main repository. Git calls this a centralized workflow. It’s straightforward and works well for many projects. However, sometimes you might want to pull changes from a different branch directly into your feature branch to help you keep your branch up
GitHub Actions token integration now generally available in GitHub Models · GitHub Changelog
AI & MLLearn about artificial intelligence and machine learning across the GitHub ecosystem and the wider industry. Generative AILearn how to build with generative AI. GitHub CopilotChange how you work with GitHub Copilot. LLMsEverything developers need to know about LLMs. Machine learningMachine learning tips, tricks, and best practices. How AI code generation worksExplore the capabilities and be
GitHub Actions Supply Chain Attack: A Targeted Attack on Coinbase Expanded to the Widespread tj-actions/changed-files Incident: Threat Assessment (Updated 4/2)
GitHub Actions Supply Chain Attack: A Targeted Attack on Coinbase Expanded to the Widespread tj-actions/changed-files Incident: Threat Assessment (Updated 4/2) Executive Summary Update April 2: Recent investigations have revealed preliminary steps in the tj-actions and reviewdog compromise that were not known until now. We have pieced together the stages that led to the original compromise, provid
GitHub Action supply chain attack exposed secrets in 218 repos
HomeNewsSecurityGitHub Action supply chain attack exposed secrets in 218 repos The compromise of GitHub Action tj-actions/changed-files has impacted only a small percentage of the 23,000 projects using it, with it estimated that only 218 repositories exposed secrets due to the supply chain attack. Despite the small number, the potential security repercussions are still significant as some reposito
GitHub Copilot in VS Code settings reference
This article lists the configuration settings for GitHub Copilot in Visual Studio Code. For general information about working with settings in VS Code, refer to User and workspace settings, as well as the Variables reference for information about predefined variable support. Tip If you don't yet have a Copilot subscription, you can use Copilot for free by signing up for the Copilot Free plan and g
CVE-2025-30066 - GitHub Advisory Database
Summary A supply chain attack compromised the tj-actions/changed-files GitHub Action, impacting over 23,000 repositories. Attackers retroactively modified multiple version tags to reference a malicious commit, exposing CI/CD secrets in workflow logs. The vulnerability existed between March 14 and March 15, 2025, and has since been mitigated. This poses a significant risk of unauthorized access to
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
GitMCP
GitHub - actions/ai-inference: An action for calling AI models with GitHub Models
GitHub - github/github-mcp-server: GitHub's official MCP Server
acreom — The way developers get things done
GitHub - mheap/pin-github-action: Pin your GitHub actions to a specific hash
Configuration of a minimum package age required before a PR is created · Issue #3651 · dependabot/dependabot-core
Workflow syntax for GitHub Actions - GitHub Docs
GitHubアクションを学ぶ
GitHub - woodruffw/zizmor: A static analysis tool for GitHub Actions
Multiple tags in this action are compromised · Issue #2463 · tj-actions/changed-files
GitHub - sethvargo/ratchet: A tool for securing CI/CD workflows with version pinning.
