GitHub, owned by Microsoft, is a hosting service for software development using Git, an open source version control and collaboration program developed by Linus Torvalds.

Multiple high-profile open-source projects, including those from Google, Microsoft, AWS, and Red Hat, were found to leak GitHub authentication tokens through GitHub Actions artifacts in CI/CD ...

By automating the end-to-end machine learning pipeline, it empowers less-experienced developers to build high-quality models ...

A lawsuit filed in a U.S. Federal Court in San Francisco claims GitHub Copilot, which trained on billions of lines of publicly-available code, is violating the legal rights of those who posted code ...

The popular tj-actions/changed-files GitHub Action used by thousands of repositories recently compromised those repositories, exposing a critical weakness in how open-source Actions are published ...

Also, the incident highlights fundamental problems in the chain of trust between open-source repositories, as well as GitHub Action ecosystem issues like tag mutability and poor audit logging.

A dependent action in Bazel could permit malicious code injection into a GitHub Actions workflow, highlighting risk from third-party dependencies.

SlowMist discovers "Solana-pumpfun-bot" to contain malicious code that steals crypto coins from users' wallets.

GitHub this week released its Octoverse 2022 report, highlighting statistics, insights and evolutions across the open-source community.

The lawsuit that could rewrite the rules of AI copyright Microsoft, GitHub, and OpenAI are being sued for allegedly violating copyright law by reproducing open-source code using AI. But the suit ...