Loading
Topic
repository security
7 posts about repository security by 4 contributors.
Know repository security? Share what you know with developers who are learning it.
+ Follow repository securityBe the first to follow this
- Articles
- 7
- Contributors
- 4
Everything about repository security
- Article · AI Agents
Securing AI Coding Agents Against Malicious Repository Changes
Learn how to secure AI coding agents against malicious repository content using trust boundaries, least-privilege permissions, isolated workspaces, and validation before merge.
- Article · Cyber Security
GitHub Updates GitHub App Permissions for Least-Privilege Access
Learn about GitHub App permission updates for least-privilege access, including repository creation, installation management, refresh tokens, and credential controls.
- Article · DevOps
Using GitHub Commit Attribution to Investigate Changes in a Repository
Learn how GitHub push attribution distinguishes the authenticated pusher from Git commit authors and committers when investigating unexpected repository changes.
- Article · Cyber Security
GitHub Now Tracks Who Pushed a Commit, Not Just Who Authored It
Learn how GitHub push attribution distinguishes commit authors, committers, and pushers to help teams investigate repository changes and improve audit trails.
- Article · Cyber Security
GitHub AI Scan Status Is Now Visible in Security Overview
Learn how GitHub Security Overview displays effective AI Scan status across repositories, supports filtering and CSV exports, and helps teams identify gaps in pull request security coverage.
- Article · Cyber Security
GitHub Code Scanning Now Skips Inactive Repositories
Learn how GitHub code scanning can skip inactive repositories, the resource benefits, and the security controls teams need for inactive but still deployed code.
- Article · Cyber Security
GitHub Ruleset Insights: Measuring Repository Governance and Policy Bypasses
Learn how GitHub Ruleset Insights can help teams measure repository governance, identify policy bypasses, monitor ruleset enforcement, and improve enterprise GitHub security.
