GitHub
We track 65 posts about GitHub from 31 engineering blogs. Most active: GitHub Old, Pamela Fox, Carlos Becker. Latest post: Oct 1, 2026.
Companies writing about GitHub
Recent posts
Node 20 GitHub Actions Deprecated: How to Migrate Workflows (opens on the source site)
With Node 20 GitHub Actions deprecated, workflows need updating. Learn how to separate runner runtimes from project Node versions, update custom action metadata, and audit native module dependencies. Continue reading Node 20 GitHub Actions Deprecated: How to Migrate Workflows on SitePoint.
10 technical talks I’m excited about at GitHub Universe 2026 (opens on the source site)
From verifying AI-written code to securing npm dependencies, these are the sessions I’m building my Universe agenda around. The post 10 technical talks I’m excited about at GitHub Universe 2026 appeared first on The GitHub Blog.
Automating DevSecOps Static Analysis with GitHub Actions and Agent Skills (opens on the source site)
Implement an automated CI DevSecOps static security analysis workflow in GitHub Actions using sandboxed Agent Skills that outputs standard SARIF reports for native GitHub Code Scanning integration. Continue reading Automating DevSecOps Static Analysis with GitHub Actions and Agent Skills on SitePoint.
GitHub Copilot app for Beginners: How to build custom workflows with canvases (opens on the source site)
Describe the interface you need in plain English, then let the agent build a live surface you can both use and update—so you spend less time adapting to tools and more time getting work done. The post GitHub Copilot app for Beginners: How to build custom workflows with canvases appeared first on The GitHub Blog.
Push images to Vercel Container Registry from GitHub Actions (opens on the source site)
Vercel ·
You can now push container images from GitHub Actions to Vercel Container Registry (VCR) without storing long-lived registry credentials. The new vercel/vcr-action/login action authenticates your workflow using GitHub OIDC. It exchanges the workflow’s OIDC token for a short-lived Vercel access token, then uses that token to log in to vcr.vercel.com. When the job ends, the action logs out and revokes the Vercel token. To start: Create an OIDC policy on your Vercel team that matches the GitHub repository and workflow, and grants read-write access to VCR. Store your Vercel team ID as a GitHub…
AI-powered fuzzing with the GitHub Security Lab Taskflow Agent (opens on the source site)
In this blog post, I explain how to use the new fuzzing taskflow based on the GitHub Security Lab Taskflow Agent AI framework. The post AI-powered fuzzing with the GitHub Security Lab Taskflow Agent appeared first on The GitHub Blog.
Rendering huge pull requests in the GitHub Copilot app (opens on the source site)
How we rebuilt the diff surface in the GitHub Copilot app to open a million-line pull request with hundreds of inline review comments. The post Rendering huge pull requests in the GitHub Copilot app appeared first on The GitHub Blog.
Prompt-Driven Development: Building with GitHub Copilot Coding Agents (opens on the source site)
We used GitHub Copilot coding agents to build an app across different time zones. The AI wrote the code, but prompts, tests, guardrails, and pull requests made it software development rather than vibe coding.
Developers want more efficient software. Here’s what over 1000 GitHub users told us they need. (opens on the source site)
New research from GitHub and Yale Program on Climate Change Communication finds strong demand for tools, measurement, and practical guidance that can help developers reduce wasted compute. The post Developers want more efficient software. Here’s what over 1000 GitHub users told us they need. appeared first on The GitHub Blog.
Optimizing GitHub Actions for Agent PRs: Speculative Test Slicing and AST Impact Analysis (opens on the source site)
Fix CI saturation from high-frequency agent pull requests with AST change-impact analysis and speculative test slicing in GitHub Actions. Continue reading Optimizing GitHub Actions for Agent PRs: Speculative Test Slicing and AST Impact Analysis on SitePoint.
GitHub Actions leaking secrets when Miri output is cached (opens on the source site)
Rust ·
The Rust Security Response Team was notified that Miri stores all environment variables to target/, allowing secrets to persist in caches. While not necessary a vulnerability in and of itself, when paired with GitHub Actions caching behavior, it is possible for this to expose secrets to PRs. Overview GitHub Actions makes it possible to cache directories between runs. Typical setups allow CI runs on main (and other branches) to write to cache, and PRs can only read from cache (preventing cache poisoning). Rust projects tend to speed up CI by caching binaries built by cargo install and…
Securing AI Pull Requests: Building a Deterministic AST Audit Harness in GitHub Actions (opens on the source site)
Build a deterministic CI/CD audit harness that checks AI coding-agent pull requests for AST prototype pollution, secret leakage, and unsafe egress before merge. Continue reading Securing AI Pull Requests: Building a Deterministic AST Audit Harness in GitHub Actions on SitePoint.
Migrating the GitHub Copilot runtime to Rust, using Copilot (opens on the source site)
A rewrite this size wasn't affordable before agents. Here's what porting the Copilot agent runtime to 800,000 lines of production Rust actually took. The post Migrating the GitHub Copilot runtime to Rust, using Copilot appeared first on The GitHub Blog.
Test GitHub Actions Locally with Act (opens on the source site)
GitHub Actions are a great way to implement CI/CD into your projects, whether personal or professional. GitHub has a lot of great tools to help with CI/CD, but GitHub Actions in particular is very helpful. However, writing actions can be tedious and a little annoying, especially if you don’t know what you’re doing. On top […] The post Test GitHub Actions Locally with Act appeared first on Atomic Spin.
GitHub Alternative List: Quintessential Options (opens on the source site)
Every developer knows just how important it is to share work with a coworker. If you are working on a critical feature in a crunch, prompt peer reviews and instant feedback can mean the difference between a secure contract and an angry client. So it follows that when the infrastructure we rely on to work […] The post GitHub Alternative List: Quintessential Options appeared first on Atomic Spin.
Marketing ops as code: Automating events from planning to follow-up on GitHub (opens on the source site)
If you can write down how you do your work, you can automate it. Here's what I did to support GitHub's APAC marketing team. The post Marketing ops as code: Automating events from planning to follow-up on GitHub appeared first on The GitHub Blog.
GitHub Copilot app for Beginners: Using the diff, terminal, and browser (opens on the source site)
Checking agent-generated code usually means hopping between tabs. Learn how to view diffs, run terminal commands, and preview web apps side by side in the GitHub Copilot app. The post GitHub Copilot app for Beginners: Using the diff, terminal, and browser appeared first on The GitHub Blog.
GitHub availability report: August 2026 (opens on the source site)
In August, we experienced five incidents that resulted in degraded performance across GitHub services. The post GitHub availability report: August 2026 appeared first on The GitHub Blog.
Taylor disabled GitHub Issues on most Laravel open-source packages. (opens on the source site)
Laravel ·
If you hit a bug, describe it to a coding agent and open a PR. Even if the code isn't great, that's fine - code can be iterated on. The PR still documents the problem, and a proper fix can follow. The post Taylor disabled GitHub Issues on most Laravel open-source packages. appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles like this directly in your inbox.
GitHub Copilot app for Beginners: Run several agents at once (opens on the source site)
Learn how to run parallel agents in the GitHub Copilot app, and experience the moment it stops feeling scary and starts feeling powerful. The post GitHub Copilot app for Beginners: Run several agents at once appeared first on The GitHub Blog.
Important Update for GitHub Actions OIDC: Immutable Subject Claims (opens on the source site)
GitHub has introduced Immutable Subject Claims for OIDC (OpenID Connect) in GitHub Actions. This update fixes a security issue where the subject claim in the OIDC token used to be based on organisation and repository names instead of permanent identifiers. What was the problem? Organisation and repository names can be changed or reused. This means that if an organisation or repository is deleted or renamed, another actor could, in theory, create a new repository or organisation with the same name. This would let them land in the same namespace within the subject claim, and in the worst case…
GitHub Copilot app for Beginners: Automate Dependabot pull request triage (opens on the source site)
Managing library updates can be tedious at times. Learn how the GitHub Copilot app can handle this type of repetitive task. The post GitHub Copilot app for Beginners: Automate Dependabot pull request triage appeared first on The GitHub Blog.
Running AI agents in GitHub Actions with Docker Sandboxes (opens on the source site)
Docker ·
Run AI agents in GitHub Actions with Docker Sandboxes. See how isolated agents can run Testcontainers tests, fix code, and open draft pull requests.
Quiz: Introduction to Git and GitHub for Python Developers (opens on the source site)
Test your understanding of Git basics for Python projects, including commits, the staging area, branches, merges, and working with remote repos.
Query Dynatrace Managed data directly in Claude, AWS Kiro, GitHub Copilot, and other MCP-compatible clients (opens on the source site)
null Continue reading Query Dynatrace Managed data directly in Claude, AWS Kiro, GitHub Copilot, and other MCP-compatible clients on SitePoint.
Cursor Origin: GitHub Sync and Code Hosting Setup in Early Beta (opens on the source site)
Cursor launched Origin on August 17, 2026 — its own code hosting platform with repos, PRs, code browsing, and GitHub sync. Same-day GitHub outage amplified developer interest. Early beta is paid-plan only with no clear step-by-step setup guide available. Continue reading Cursor Origin: GitHub Sync and Code Hosting Setup in Early Beta on SitePoint.
GitHub Copilot app for Beginners: Managing your work (opens on the source site)
If you’re juggling multiple Copilot sessions, use the My work pane to track what's in flight, what's done, and what's next. The post GitHub Copilot app for Beginners: Managing your work appeared first on The GitHub Blog.
How to bring your software delivery workflow into GitHub with agent apps (opens on the source site)
See how four GitHub agent apps can help you scope, secure, roll out, and ship a feature across the SDLC–all without leaving GitHub. The post How to bring your software delivery workflow into GitHub with agent apps appeared first on The GitHub Blog.
Your guide to GitHub Universe 2026 is here: The schedule just launched! (opens on the source site)
The GitHub Universe session catalog is live. Explore interactive workshops, community talks, demos, and panels. Plus, register before August 19 to save $300. The post Your guide to GitHub Universe 2026 is here: The schedule just launched! appeared first on The GitHub Blog.
Using the GitHub Copilot SDK for Java (opens on the source site)
GitHub ·
Enterprise Java developers have a new superpower—drive GitHub Copilot from idiomatic Java code with annotations, virtual threads, and more. The post Using the GitHub Copilot SDK for Java appeared first on The GitHub Blog.
Related topics
This page is generated automatically from the engineering blogs we follow. Every post links to its source, where it was published. See all sources.