GitHub Actions Grows a Chain of Custody
Immutable OIDC subject claims, immutable actions and releases, artifact attestations by default: GitHub is quietly rebuilding the Actions supply chain around...
Security
GitHub Secret Scanning
GitHub Secret Scanning is a tool that scans your code for secrets, including passwords, API keys, and other sensitive information. It integrates seamlessly w...
GitHub Dependabot
GitHub Dependabot is an automated dependency management tool integrated directly into GitHub repositories. It helps keep projects secure and up-to-date by au...
GitHub Branch Protection Rules
Branch Protection Rules are a set of rules that can be applied to a branch in a GitHub repository to enforce best practices, streamline development processes...
GitHub Code Scanning
GitHub Code Scanning is a tool that analyzes your code for security vulnerabilities, providing actionable feedback to help you remediate issues quickly.