GitHub’s November 13 AI Scan API update makes repository scanning settings manageable at scale. Here’s what works, who qualifies, and what it costs.
Tag Archives: GitHub Security
GitHub Dependabot Alerts Will Pause on Inactive Repositories: What to Do
Starting December 8, GitHub will pause Dependabot alerts on most repositories inactive for a year. Here’s how to keep security alerts working.
GitHub Actions Logs Can Now Trigger Secret Scanning Alerts
GitHub’s new public preview scans completed Actions workflow logs for supported secrets. Here’s who can enable it and what it misses.
Dependabot Reachability Analysis: Prioritize Vulnerable Packages
GitHub’s October 28 preview adds reachability verdicts to Dependabot alerts, helping JavaScript teams prioritize vulnerable packages. Here’s how to enable it and what it cannot prove.