Technology Subset

How companies are boosting productivity with generative AI – Technology Subset

Is your company using generative AI yet? While it’s still in its infancy, generative AI coding tools are already changing the way developers and companies build software. Generative AI can boost developer and business productivity by automating tasks, improving communication and collaboration, and providing insights that can inform better decision-making. In this post, we’ll explore […]

Technology Subset

How to fix a ReDoS – Technology Subset

Although some ReDoS vulnerabilities can be very serious (particularly when they’re server-side and enable an untrusted remote attacker to DOS the server), very often they land much closer to the “annoying” end of the CVSS rating scale: not particularly serious, but easy to create by accident, obscure to understand, and sometimes tricky to fix. The […]

Technology Subset

Push protection is generally available, and free for all public repositories – Technology Subset

At GitHub, we believe that by empowering developers with intuitive security built into their workflows, we can, together, shift security from reactive to proactive. Since the beta release of secret scanning’s push protection feature for GitHub Advanced Security users in April 2022, developers using push protection have prevented 17,000 potential secret leaks–saving over 95,000 hours […]

Technology Subset

inclusive retrospectives for the GitHub Accessibility leadership team – Technology Subset

Retrospectives are essential for a team’s ongoing growth and achievement, but they can be exclusionary for team members with disabilities due to the inaccessibility of most retrospective tools. These tools often depend on drag-and-drop functionality, images, color coding, and undefined digital spaces with no clear headings or navigational anchors. To ensure everyone can actively participate, […]

Technology Subset

Building a culture of innovation in your business with GitHub – Technology Subset

Modern software engineering practices are essential to deliver value to your users. After all, isn’t that the promise of DevOps? A combination of people, process, and technology to accelerate delivery of value to end users? Value could mean many things. It could mean running a reliable service where your users experience limited downtime. It could […]

Technology Subset

Manage your application security stack effectively with the tool status page – Technology Subset

As a developer, there’s a variety of application security tools that you can use to help secure your applications. It’s not uncommon to find yourself balancing multiple tools in your application security stack, whether they be an open source or third-party solution. Code scanning specifically gives you the ability to integrate a variety of code […]

Technology Subset

our biggest group of open source leaders yet! – Technology Subset

GitHub believes that everyone—especially people from underserved and underrepresented communities — should have access to open source and the necessary skills to engage in open source development. To that end, we launched All In for Students to provide open source training, as well as internships and job opportunities. This past year we started to scale […]

Technology Subset

April 2023 – Technology Subset

In April, we experienced four incidents that resulted in degraded performance across GitHub services. This report also sheds light into three March incidents that resulted in degraded performance across GitHub services. March 27 12:25 UTC (lasting 1 hour and 33 minutes) On March 27 at 12:14 UTC, users began to see degraded experience with Git […]

Technology Subset

Pivoting to development specific news – Technology Subset

k8s.gcr.io Redirect to registry.k8s.io – What You Need to Know Authors: Bob Killen (Google), Davanum Srinivas (AWS), Chris Short (AWS), Frederico Muñoz (SAS Institute), Tim Bannister (The Scale Factory), Ricky Sadowski (AWS), Grace Nguyen (Expo), Mahamed Ali (Rackspace Technology), Mars Toktonaliev (independent), Laura Santamaria (Dell), Kat Cosgrove (Dell)On… Source link

Technology Subset

Dependabot relieves alert fatigue from npm devDependencies – Technology Subset

Over the past few months, we’ve made a number of improvements that make Dependabot smarter, quieter, and easier to work with, from pausing pull requests on inactive repositories to making alerts visible to more developers. Today, we’re addressing the alert fatigue problem with a new allow auto-dismissal function in Dependabot that safely reduces the volume […]

Technology Subset

Git security vulnerabilities announced | The GitHub Blog – Technology Subset

Today, the Git project released new versions to address a pair of security vulnerabilities, CVE-2023-25652 and CVE-2023-29007, that affect versions 2.40.0 and older. Git was also patched to address additional, Windows-specific vulnerabilities: CVE-2023-25815, CVE-2023-29011, and CVE-2023-29012. The Git for Windows project released new versions including the fixes for all five of these vulnerabilities. To protect […]