GitHub

Security | Aug 03, 2022

GitHub supply chain attack cloned thousands of projects, spoofed genuine users

"No-one has the time or sanity to audit every thing every build process pulls in."

Security | Apr 28, 2022

Heroku's GitHub connection remains on ice after breach as customers fret, eye alternatives

Several weeks after a major security incident at Heroku, the company said this week it "will not be reconnecting to GitHub until we are certain that we can do so safely, which may take some time" -- as news of the early April breach continues to percolate slowly

Security | Apr 19, 2022

GitHub hacked, npm data stolen after 0auth tokens stolen in upstream breach

GitHub hacked after Heroku, Travis-CI 0auth tokens stolen in upstream attack

Enterprise IT | Apr 05, 2022

GitHub adds welcome option to scan for secrets BEFORE Git pushes

For repo security, take a look at Palantir's open source Policy Bot too...

document.currentScript.parentNode.innerHTML = (parseInt(document.currentScript.closest('.iteration-container').dataset.length)).toString();