FakeGit Targets AI Coding Agents with Malicious GitHub Repos
Threat actors continue to find new ways to incorporate AI into schemes aimed at luring developers into downloading malware from fake repositories. The latest example involves almost 7,600 malicious GitHub repositories that are being used to distribute a loader and an information-stealer. The FakeGit campaign is nothing new, with Oleg Zaytsev, lead security researcher with […]
xAI Open-Sources Grok Build Coding Agent After Cloud Upload Exposes SSH Keys, Repos
xAI has published the full source code for Grok Build, its terminal-based AI coding agent, on GitHub under an Apache 2.0 license. The release lands three days after a security researcher showed the tool quietly shipping entire developer repositories — SSH keys and password databases included — to a Google Cloud bucket xAI controls. The […]
SmartBear Tightens Integration Between AI Coding and Testing Tools
SmartBear this week revealed it is narrowing the divide between coding and testing by integrating its platform with artificial intelligence (AI) coding tools. Sheryl Koenigsberg, senior vice president of product marketing at SmartBear, said integrations with AI coding tools from Anthropic, Atlassian, GitHub, and Amazon Web Services (AWS) will make it simpler for application developers […]
GitHub’s Redesigned PR Inbox Tackles the Review Bottleneck AI Created
GitHub’s redesigned pull requests dashboard is now GA, adding Inbox, saved views, and smarter filters as PR review queues grow.
Former GitHub CEO Unveils Distributed Git Network Built for AI Coding Agents
As AI coding agents become a larger part of software development, a new startup founded by former GitHub CEO Thomas Dohmke is introducing infrastructure built to address the growing pressure on centralized Git hosting. The new company, Entire, has launched a preview of a distributed Git network that allows developers to mirror GitHub repositories across […]
Akrites: The Latest Attempt to Protect Open-Source From AI Attacks Has Arrived
Akrites, a new Linux Foundation initiative backed by many of the world’s largest tech and financial firms, is the industry’s latest attempt to get ahead of AI‑accelerated software supply chain risks by hardening critical open source projects before attackers can exploit them. On June 25, the Linux Foundation unveiled Akrites, a coordinated industry program designed […]
GitHub Code Quality Moves to General Availability, Bringing New Costs and Capabilities
GitHub is closing the book on the free preview period for one of its most widely adopted recent features. More than 10,000 enterprises used the GitHub Code Quality public preview to detect maintainability and reliability issues, enforce quality gates, and track code coverage. Starting July 20, 2026, that free ride ends. Code Quality becomes a […]
GitHub Retires Its Free AI Model Playground — What Developers Need to Know
GitHub is retiring GitHub Models, closing it to new customers. Existing users can continue for now; Azure AI Foundry is the path forward.
Microsoft Enlists AWS to Help GitHub Handle Explosive Growth in AI Development
Microsoft has reportedly begun using Amazon Web Services to provide additional computing capacity for GitHub as a dramatic rise in AI-assisted software development places unprecedented demands on the coding platform. The news is unexpected from Microsoft, which has spent years positioning Azure as the destination for GitHub’s long-term infrastructure. Since acquiring GitHub in 2018, Microsoft […]
GitHub Actions Gets Serious About Self-Hosted Runner Versions
GitHub is resuming enforcement of minimum version requirements for GitHub Actions self-hosted runners — and this time, the deadlines are firm. After a rocky start that included multiple delays and a temporary pause earlier this year, GitHub has published a clear enforcement timeline for both GitHub Enterprise Cloud and GitHub Enterprise Cloud with Data Residency. […]
GitHub Enterprise Server 3.21 Is Now Generally Available
GitHub has released GitHub Enterprise Server (GHES) 3.21, the latest version of its self-hosted platform for enterprise development teams. The release focuses on improving deployment efficiency, monitoring, code security, and policy management — areas that matter most to enterprise DevOps teams managing complex environments at scale. Here’s a look at what’s new and why it […]
GitHub Removes PAT Requirement for Agentic Workflows
GitHub Agentic Workflows can now use GitHub Actions’ built-in GITHUB_TOKEN instead of a personal access token (PAT). That means developers no longer need to create, store, or rotate a PAT to run agentic workflows, eliminating both the operational hassle and the security risks that come with managing long-lived tokens at scale.
GitHub Copilot Gets Its Own App — and Agents Are the Reason Why
GitHub debuts the Copilot app at Microsoft Build 2026 — an agent-native desktop experience for managing parallel AI agents, canvases, sandboxes, and code review.
GitHub Breach Tied to Malicious VS Code Extension Exposes Thousands of Internal Repositories
GitHub says attackers accessed thousands of internal repositories after a company employee’s device was compromised through a malicious Visual Studio Code extension, though the company said it has removed the malicious extension, isolated the compromised endpoint, and launched an investigation. The company confirmed that approximately 3,800 internal repositories were affected. GitHub stated that investigators have […]
GitHub Faces Scaling Issues as AI Development Surges
It appears that GitHub has its hands full adjusting to the demands of scaling AI workloads. First, the company paused sign-ups for its Copilot subscription tiers in response to a wave of demand from agentic AI projects. Then it shifted to usage-based pricing to, again, better align revenue with the heavy compute demands of AI […]
GitHub Resets Copilot Pricing as AI Compute Costs Surge
The development community saw this one coming: GitHub will transition its Copilot service to a usage-based billing model on June 1, replacing its existing system of fixed subscriptions supplemented by premium request limits. As reported last week, GitHub suspended new sign-ups for several of its Copilot subscription tiers as it faced a surge in demand […]
GitHub Halts Copilot Growth as AI Coding Costs Outpace Subscriptions
GitHub has suspended new sign-ups for several of its Copilot subscription tiers, a decision that follows a surge in demand driven by agentic coding workflows, which consume far more compute resources than earlier models of AI assistance. The company confirmed that new subscriptions for Copilot Pro, Pro+, and Student plans are paused, while existing users […]
GitHub Introduces Stacked PRs to Ease Review Bottlenecks
GitHub’s new Stacked Pull Requests feature restructures how developers submit and review changes by allowing large code updates to be broken into smaller, interdependent units. With Stacked PRs, each unit can be reviewed and merged individually while still contributing to the overall feature set. The approach helps developers shift away from monolithic pull requests, which […]
GitHub to Leverage User Code for AI Model Training, Allows Opt-Out
GitHub is preparing a significant change to how it trains the AI models behind its Copilot coding assistant. Beginning April 24, the Microsoft-owned platform will collect user interaction data by default to improve its AI systems, unless users actively disable the setting. The update applies to individuals using Copilot Free, Pro, and Pro+ tiers. Enterprise […]
GitHub Tests AI Agents to Handle Repository Upkeep
GitHub is introducing a new approach to streamline developer workflow, offering AI agents that can shoulder the repetitive tasks that accumulate inside code repositories. Known as Agentic Workflows, the feature is available in technical preview and is designed to embed AI into GitHub Actions as an integrated part of the production process. GitHub promotes Agentic […]
Open Source’s ‘Eternal September’, GitHub Keeps Maintainers Covered for All Seasons
Open source is experiencing an “Eternal September” due to a massive influx of contributions fueled by AI. While this increases engagement, it overwhelms maintainers. GitHub is introducing tools like interaction limits and improved triage to protect maintainer sustainability and trust.
Qodo Adds Multiple AI Agents to Code Review Platform
Qodo 2.0 adds memory-enabled, task-specific AI agents to its LLM-based code-review platform, improving defect recall and F1 performance to help DevOps scale code quality as AI-generated code rises.
‘PackageGate’ Vulnerabilities Can Let Attackers Bypass Shai-Hulud Defenses
In the wake of the massive Shai-Hulud supply chain attack that ripped through npm late last year and compromised more than 700 packages and exposed 25,000 repositories, developers in the JavaScript world embraced a two-part defense strategy. The widely adopted playbook called for disabling lifecycle scripts and using lockfiles. “It became the standard advice everywhere […]