On October 14, 2026, GitHub released "workflow dependency lockfiles" for Actions in public preview. Similar to npm's ...

GitHub Actions 'uses' tags can be updated later to point to different commits. The gh extension 'gh-actions-lock', which pins ...

GhostAction targeted over 30,000 GitHub repositories using about 1,900 compromised accounts and tried to extract 3,174 ...

A critical flaw in ChatGPT’s GitHub integration that could turn a routine repository review into a secret-theft attack.

Menu. Currently selected: Keep locked dependencies up to date with Dependabot Keep locked dependencies up to date with Dependabot Get started GitHub Actions workflow dependency lockfiles are now in ...

A newly disclosed alleged vulnerability in ChatGPT’s GitHub connector could enable attackers to steal repository secrets ...

The credential-theft campaign known as GhostAction has significantly increased its activity, impacting more than 30,000 ...

GitHub now expires unvalidated npm trusted publisher bindings after 48 hours to limit package hijacks through reclaimed ...

Python 3.15 brings native Arm64 support to Windows on Arm, with 94% package compatibility and new GitHub Actions runners.

GitHub says it is investigating reports of degraded performance affecting Actions, Issues and Pull Requests, and the incident ...

This app does it all, and more ...

Explore platform engineering vs traditional DevOps, including golden paths, self-service, automation, developer experience, ...