The latest blogs from GitHub

The barriers to building software have collapsed. Today, anyone can build. Hackathons are a great place to start learning.

As we kick off Cybersecurity Awareness Month, the GitHub Bug Bounty team spotlights @vaib25vicky, exploring their methodology, techniques, and experiences hacking on GitHub.

Developers aren’t becoming more careless; they’re being outpaced. The tools that let developers create more software should also take on more of the work of protecting it.

We’re rebuilding GitHub’s Git infrastructure while GitHub keeps running, creating a foundation for agent-scale software development.

We’re launching ReviewBench, a benchmark for code review agents built on representative GitHub pull requests, multi-source ground truth, calibrated evaluation, and production-aligned metrics.

Learn to direct AI agents, critically review their output, and keep technical judgment at the center of your workflow.

From verifying AI-written code to securing npm dependencies, these are the sessions I’m building my Universe agenda around.

Explore GitHub’s latest transparency data and learn more about policy updates affecting developers and open source.

A look at the targeted AI taskflows behind these findings, the critical Android bugs they uncovered, and how to run the same open-source agent on your own app.

The open source Git project just released Git 2.56. Here is GitHub’s look at some of the most interesting features and changes introduced since last time.

How we fully migrated github.com away from CSS-in-JS.

What is a developer to do when they need something more tangible than a chat box? Enter canvases.

In this blog post, I explain how to use the new fuzzing taskflow based on the GitHub Security Lab Taskflow Agent AI framework.

How we rebuilt the diff surface in the GitHub Copilot app to open a million-line pull request with hundreds of inline review comments.

New research from GitHub and Yale Program on Climate Change Communication finds strong demand for tools, measurement, and practical guidance that can help developers reduce wasted compute.

A rewrite this size wasn’t affordable before agents. Here’s what porting the Copilot agent runtime to 800,000 lines of production Rust actually took.

If you can write down how you do your work, you can automate it. Here’s what I did to support GitHub’s APAC marketing team.

In August, we experienced five incidents that resulted in degraded performance across GitHub services.