Tag: github
New npm Threat Bypasses Install Script Protections
A malicious npm package that has been downloaded millions of times comes with a new way of spreading the malware that makes it easier to bypass security protections, say researchers with security ...
GitHub Separates Who Writes Code From Who Runs Your CI
Tom Smith | | Actions security, CI/CD security, devops, devsecops, github, GitHub Actions, GitHub Enterprise, GitHub security, pipeline security, pull_request_target, Repository Security, Software Supply Chain, supply chain security, workflow execution protections, workflow securityGitHub’s new workflow execution protections let teams control who and what can trigger Actions workflows, reducing CI/CD attack paths and tightening pipeline security ...
GitHub’s August Outages Show Growth Is Outpacing Infrastructure
Tom Smith | | AI coding agents, capacity planning, CI/CD, cloud infrastructure, developer infrastructure, developer productivity, devops, distributed systems, github, GitHub Actions, GitHub Copilot, GitHub outages, incident response, platform engineering, platform reliability, production resilience, retry storms, service availability, software delivery, Software Supply ChainGitHub's August 2026 report details five outages tied to Actions and Copilot growth outpacing infrastructure. Here's what platform teams should know ...
GitHub Workflows Strain Under AI Agent Development
Coder CEO Rob Whiteley joins Mike Vizard to explain why GitHub workflows, CI/CD pipelines and developer platforms are showing strain under agentic development — and what a policy-aware redesign of the DevOps ...
GitHub’s New Copilot Feature Takes the Guesswork Out of Picking AI Models
Tom Smith | | agentic AI, AI agents, AI coding assistants, AI cost optimization, AI Governance, AI model routing, Code Generation, developer tools, devops, github, GitHub Copilot, model selection, multi-model orchestration, platform engineering, Project HydraFusion, software developmentGitHub’s Project HydraFusion brings multi-model orchestration to Copilot, automatically routing coding tasks across AI models to balance quality, cost and complexity ...
GitHub Puts Copilot in the Approval Seat for Pull Requests
Tom Smith | | AI code review, AI coding, AI Governance, automated code review, branch protection, code review, Copilot code review, developer productivity, developer tools, devops, Engineering Governance, github, GitHub approvals, GitHub Copilot, PR approvals, pull requests, software development, software lifecycleGitHub Copilot can now submit binding pull request approvals, moving AI code review from advisory feedback into the merge decision itself ...
When AI Coding Agents Become Malware Delivery Systems
Samuel Ogbonna | | AI coding agents, AI security, devsecops, github, prompt injection, Software Supply ChainAI coding agents are becoming part of everyday development work. Developers use them to find libraries, configure projects, troubleshoot installation problems, and set up new tools. An agent can search GitHub, read ...
Harness Unfurls Source Code Repository Alternative to GitHub
Harness today launched a code repository service that is specifically designed for DevOps teams that are relying on artificial intelligence (AI) agents to generate code. Martin Reynolds, Field CTO for Harness, said ...
GitHub Sharpens CodeQL’s Eye on Actions Workflows and Modern JavaScript
GitHub Actions pipelines have become one of the quieter attack surfaces in software development. They pull in third-party actions, cache dependencies, and pass secrets between jobs, often without anyone reviewing the workflow ...
Cursor Launches Origin Code Hosting Platform as GitHub Rival
AI coding provider Cursor has launched Origin, a code hosting platform that puts source code and AI coding agents inside the Cursor development environment. The new coding platform expands the company into ...
Microsoft’s GitHub Hit by Major Outage as AI-Driven Demand Strains Infrastructure
Jon Swartz | | AI infrastructure, AI workflows, API, copilot, Downdetector, github, GitHub Actions, GitHub outages, GitHub Pages, Government, microsoft, Microsoft Teams, Rubrik, zero-trustGitHub, the Microsoft Corp.-owned code hosting platform serving more than 180 million developers, is still reeling from a widespread outage on Monday that severely disrupted software development pipelines globally. The hours-long incident ...
GitHub Hit by Widespread Outage, Halting Work for Global Developers
Jon Swartz | | AI coding, Anthropic, API, cloudbees, Cursor, Downdetector, error rates, github, GitHub Actions, GitHub Copilot, GitHub outages, microsoft, Microsoft Teams, OpenAI, SAML, service monitoring forums, Social media, Team SyncA major technical outage struck GitHub on Monday morning, disrupting workflows for millions of developers worldwide for several hours as critical services, automated testing pipelines, and artificial intelligence (AI) coding tools suffered ...
