Home - The GitHub Blog

Four steps toward building an open source community

Three maintainers talk about how they fostered their open source communities.

A screenshot of VS Code showing a Bash script for manual dependency auditing. The script named "manual-audit.sh" is open in the editor, displaying code that lists dependencies, checks for outdated ones, and identifies potentially unused packages. The script outputs results to deps.txt and outdated.txt files. The left panel shows a file explorer with various project files including JavaScript files and configuration files. On the right side, there's a prompt to GitHub Copilot to "Create a GitHub Action for dependency auditing with depcheck and issue posting. And a separate Dependabot workflow for managing outdated dependencies."

Video: How to run dependency audits with GitHub Copilot

Learn to automate dependency management using GitHub Copilot, GitHub Actions, and Dependabot to eliminate manual checks, improve security, and save time for what really matters.

AI & ML

Not just for developers: How product and security teams can use GitHub Copilot

GitHub Copilot isn’t just for developers! Discover how product managers, security professionals, scrum masters, and more use GitHub Copilot to streamline tasks, automate workflows, and boost productivity across teams.

Engineering

Finding leaked passwords with AI: How we built Copilot secret scanning

Passwords are notoriously difficult to detect with conventional programming approaches. AI can help us find passwords better because it understands context. This blog post will explore the technical challenges we faced with building the feature and the novel and creative ways we solved them.

Latest

View all

AI & ML

GitHub for Beginners: How to get started with GitHub Copilot

Get started with GitHub Copilot and navigate features like Copilot Chat in this installment of the GitHub for Beginners series.

Open Source

Community managers in action: Leading a developer community for good

GitHub’s Digital Public Goods Open Source Community Manager Program just wrapped up a second successful year, helping Community Managers gain experience in using open source for good.

AI & ML

How to debug code with GitHub Copilot

GitHub Copilot can streamline your debugging process by troubleshooting in your IDE, analyzing pull requests, and more, helping you tackle issues faster and more robustly.

View all

Changelog

View all changes

DeepSeek-V3 is now generally available in GitHub Models

March 7, 2025

Onboarding additional model providers with GitHub Copilot for Claude Sonnet models in public preview

March 6, 2025

GitHub Issues & Projects: API support for issues advanced search and more!

March 6, 2025

GPT-4o Copilot March flight is ready for takeoff

March 6, 2025

View all changes

Engineering

How GitHub uses CodeQL to secure GitHub

How GitHub’s Product Security Engineering team manages our CodeQL implementation at scale and how you can, too.

Considerations for making a tree view component accessible

A deep dive on the work that went into making the component that powers repository and pull request file trees.

Breaking down CPU speed: How utilization impacts performance

The Performance Engineering team at GitHub assessed how CPU performance degrades as utilization increases and how this relates to capacity.

How to make Storybook Interactions respect user motion preferences

With this custom addon, you can ensure your workplace remains accessible to users with motion sensitivities while benefiting from Storybook’s Interactions.