Ascendant Bot
- Amazon Security Lake , Application security , Code security , Dependabot , GitHub , GitHub Copilot , GitHub Copilot Autofix , Secret Protection
- April 10, 2025
How we’re making security easier for the average developer
Security should be native to your workflow, not a painful separate process.
The post How we’re making security easier for the average developer appeared first on The GitHub Blog.
- Amazon Security Lake , Application security , Code security , GitHub
- April 8, 2025
Found means fixed: Reduce security debt at scale with GitHub security campaigns
Starting today, security campaigns are generally available for all GitHub Advanced Security and GitHub Code Security customers—helping organizations take control of their security debt and manage risk by unlocking collaboration between developers and security teams.
The post Found means fixed: Reduce security debt at scale with GitHub security campaigns appeared first on The GitHub Blog.
- Amazon Security Lake , Application security , GitHub , GitHub Security Lab
- April 3, 2025
Localhost dangers: CORS and DNS rebinding
What is CORS and how can a CORS misconfiguration lead to security issues? In this blog post, we’ll describe some common CORS issues as well as how you can find and fix them.
The post Localhost dangers: CORS and DNS rebinding appeared first on The GitHub Blog.
- Amazon Security Lake , Application security , GitHub , GitHub Advanced Security , Secret Protection , Secret Scanning
- April 1, 2025
GitHub found 39M secret leaks in 2024. Here’s what we’re doing to help
Every minute, GitHub blocks several secrets with push protection—but secret leaks still remain one of the most common causes of security incidents. Learn how GitHub is making it easier to protect yourself from exposed secrets, including today’s launches of standalone Secret Protection, org-wide scanning, and better access for teams of all sizes.
The post GitHub found 39M secret leaks in 2024. Here’s what we’re doing to help appeared first on The GitHub Blog.
- Amazon Security Lake , Application security , Career in Cybersecurity , GitHub , security research , Vulnerability Detection , Vulnerability research
- January 29, 2025
Cybersecurity researchers: Digital detectives in a connected world
Discover the exciting world of cybersecurity research: what researchers do, essential skills, and actionable steps to begin your journey toward protecting the digital world.
The post Cybersecurity researchers: Digital detectives in a connected world appeared first on The GitHub Blog.
- Amazon Security Lake , Application security , CodeQL , GitHub , GitHub Security Lab
- January 9, 2025
How to secure your GitHub Actions workflows with CodeQL
In the last few months, we secured 75+ GitHub Actions workflows in open source projects, disclosing 90+ different vulnerabilities. Out of this research we produced new support for workflows in CodeQL, empowering you to secure yours.
The post How to secure your GitHub Actions workflows with CodeQL appeared first on The GitHub Blog.
