As Cybersecurity Awareness Month continues, the GitHub Bug Bounty team spotlights @r31n, diving into their research approach, favorite bug classes, and advice for aspiring hackers.

The post How bug bounty sharpens one researcher’s security skills appeared first on The GitHub Blog.

We moved a copy of 99.99999% of GitHub's repositories to Azure. Here's how per-reference quorums will bring over the rest, and how object storage lets reads scale independently.

The post The bridge to agent-scale Git infrastructure appeared first on The GitHub Blog.

Three Java Champions share how they use GitHub Copilot to solve problems, accelerate development, and keep humans responsible for the results.

The post How 3 Java Champions are using GitHub Copilot for increased productivity appeared first on The GitHub Blog.

Learn how to move an agent session from the GitHub Copilot app into VS Code without losing the conversation, code changes, or working context.

The post How to continue a GitHub Copilot app session in VS Code appeared first on The GitHub Blog.

Put native GitHub features to work to review outside collaborator access and archive stale repositories.

The post Staying Evergreen: How we automated secure access and repo hygiene in a shared org appeared first on The GitHub Blog.

AI, agents, voice, and physical controls are shifting software development from operating tools to expressing intent—and helping developers stay focused on building.

The post The next developer interface is ambient intelligence appeared first on The GitHub Blog.

In September, we experienced two incidents that resulted in degraded performance across GitHub services.

The post GitHub availability report: September 2026 appeared first on The GitHub Blog.

Our new repo star history API now provides trends without returning individual identities or requiring unbounded database work. These are the engineering tradeoffs we made.

The post From 2,500 requests to 24: Rebuilding star history without the stargazers appeared first on The GitHub Blog.

GitHub’s context-aware secret classifier improves detection quality, raises weighted acceptance by 11.5%, and reduces median scan execution time by 86%.

The post GitHub’s model for secret detection: Finding more secrets with less noise appeared first on The GitHub Blog.

Learn how to add custom instructions and skills to your repository, use custom agents, and connect MCP servers like Playwright.

The post GitHub Copilot app for Beginners: How to teach Copilot about your codebase appeared first on The GitHub Blog.

The barriers to building software have collapsed. Today, anyone can build. Hackathons are a great place to start learning.

The post Hack the World: Why hackathons are still the best place to learn to build appeared first on The GitHub Blog.

As we kick off Cybersecurity Awareness Month, the GitHub Bug Bounty team spotlights @vaib25vicky, exploring their methodology, techniques, and experiences hacking on GitHub.

The post How one bug bounty researcher chooses the features they investigate appeared first on The GitHub Blog.

Developers aren’t becoming more careless; they’re being outpaced. The tools that let developers create more software should also take on more of the work of protecting it.

The post Secret protection must scale with software appeared first on The GitHub Blog.

We're rebuilding GitHub's Git infrastructure while GitHub keeps running, creating a foundation for agent-scale software development.

The post Building Git infrastructure for agent-scale development appeared first on The GitHub Blog.

We’re launching ReviewBench, a benchmark for code review agents built on representative GitHub pull requests, multi-source ground truth, calibrated evaluation, and production-aligned metrics.

The post ReviewBench: An open benchmark for AI code review appeared first on The GitHub Blog.

Learn three ways to get noticed and grow your career as AI reshapes how developers build software.

The post AI is rewriting the developer career ladder. Here’s how to stand out. appeared first on The GitHub Blog.

From verifying AI-written code to securing npm dependencies, these are the sessions I’m building my Universe agenda around.

The post 10 technical talks I’m excited about at GitHub Universe 2026 appeared first on The GitHub Blog.

Explore GitHub’s latest transparency data and learn more about policy updates affecting developers and open source.

The post Developer policy update: Transparency, state policy, and what’s ahead appeared first on The GitHub Blog.

A look at the targeted AI taskflows behind these findings, the critical Android bugs they uncovered, and how to run the same open-source agent on your own app.

The post How we found 24 Android vulnerabilities using our open source AI security agent appeared first on The GitHub Blog.

The open source Git project just released Git 2.56. Here is GitHub's look at some of the most interesting features and changes introduced since last time.

The post Highlights from Git 2.56 appeared first on The GitHub Blog.

Describe the interface you need in plain English, then let the agent build a live surface you can both use and update—so you spend less time adapting to tools and more time getting work done.

The post GitHub Copilot app for Beginners: How to build custom workflows with canvases appeared first on The GitHub Blog.

A look at how a design system shipped major changes without breaking the world.

The post Improving site performance by shipping more CSS appeared first on The GitHub Blog.

What is a developer to do when they need something more tangible than a chat box? Enter canvases.

The post When chat is the wrong UI appeared first on The GitHub Blog.

In this blog post, I explain how to use the new fuzzing taskflow based on the GitHub Security Lab Taskflow Agent AI framework.

The post AI-powered fuzzing with the GitHub Security Lab Taskflow Agent appeared first on The GitHub Blog.

How we rebuilt the diff surface in the GitHub Copilot app to open a million-line pull request with hundreds of inline review comments.

The post Rendering huge pull requests in the GitHub Copilot app appeared first on The GitHub Blog.

New research from GitHub and Yale Program on Climate Change Communication finds strong demand for tools, measurement, and practical guidance that can help developers reduce wasted compute.

The post Developers want more efficient software. Here’s what over 1000 GitHub users told us they need. appeared first on The GitHub Blog.

We dive into these questions and other AI hot takes on the latest episode of the GitHub Podcast.

The post Should you read the code, is RAG dead, and did Skills kill MCP? appeared first on The GitHub Blog.

A rewrite this size wasn't affordable before agents. Here's what porting the Copilot agent runtime to 800,000 lines of production Rust actually took.

The post Migrating the GitHub Copilot runtime to Rust, using Copilot appeared first on The GitHub Blog.

If you can write down how you do your work, you can automate it. Here's what I did to support GitHub's APAC marketing team.

The post Marketing ops as code: Automating events from planning to follow-up on GitHub appeared first on The GitHub Blog.

Checking agent-generated code usually means hopping between tabs. Learn how to view diffs, run terminal commands, and preview web apps side by side in the GitHub Copilot app.

The post GitHub Copilot app for Beginners: Using the diff, terminal, and browser appeared first on The GitHub Blog.