About this tag
GitHub, the Microsoft-owned software development platform, is central to recent discussions about AI-driven coding workloads, infrastructure strain, and security incidents. Multiple threads report that GitHub experienced service-degrading incidents in May 2026 due to a surge in AI-assisted and agentic development traffic, prompting Microsoft to consider using Amazon Web Services for additional capacity in June 2026, even as GitHub continues its migration to Azure. Other topics include a Microsoft lawsuit over Copilot disclosures, a European multilingual AI initiative using GitHub metadata, and a credential-stealing malware incident that led to the disabling of over 70 Microsoft-linked open-source repositories. These stories highlight GitHub's role as a critical infrastructure for modern software development and the operational challenges posed by AI.
  1. WindowsForum AI

    Testmetest npm Campaign Arms 42 GitHub Repositories Using Hidden Payloads and Developer Tool Hooks

    A malicious npm campaign that initially looked like an operator’s testing exercise had already armed 42 real GitHub repositories across 11 legitimate owners, according to JFrog Security Research. The attackers planted developer-tool execution hooks alongside unusually large JavaScript...
  2. WindowsForum AI

    GitHub EMU SCIM Deprovisioning Bug: Deleted Accounts, Ghost Users and Audit Log Checks

    GitHub has published a retrospective notice about a bug that deleted Enterprise Managed User (EMU) accounts during SCIM deprovisioning. The notice says those records were restored in October 2026. It reads like a changelog footnote, but the bug touched identity lifecycle and audit trails, which...
  3. WindowsForum AI

    GitHub Pull Request Diffs Now Save Whitespace Settings and Expand New Files in Split View

    GitHub has fixed a long-running annoyance in code review. You can now tell pull request diffs how to treat whitespace once, instead of re-toggling it on every review. A second change gives new and deleted files the full width in split view. Both changes landed on October 22, 2026, in the "Files...
  4. WindowsForum AI

    GitHub Secret Scanning Public Monitoring Preview for Data Residency Tenants Uses Verified Domains

    GitHub has extended secret scanning's public monitoring to GitHub Enterprise Cloud with data residency (GHEC DR). It is now in public preview. When the feature first launched in July, GitHub said support for Enterprise Cloud with data residency was coming soon. The October 22 changelog entry...
  5. WindowsForum AI

    GitHub Azure Migration Targets Busy Repositories With Per-Reference Write Quorums

    GitHub has put copies of nearly every repository in Azure. The hard part is the last sliver of very busy repositories, and a 25 ms network hop is what's holding them back. In an engineering post on October 21, 2026, GitHub said the first repository copy landed in Azure's Central US region in...
  6. WindowsForum AI

    GitHub Secret Scanning Audit Logs Switch Enterprise Names to Slugs November 12, 2026

    GitHub's secret scanning update has one item with a deadline and seven smaller changes. The deadline matters most for anyone who pipes audit logs into a SIEM, so this piece covers it first. The item with a deadline: the audit log business field On November 12, 2026, the business field in...
  7. WindowsForum AI

    Why Zig and Ghostty Are Leaving GitHub: Actions Outages, Copilot Training and Forge Alternatives

    Calling it an "exodus" from GitHub is generous. There are two well-known departures here and a lot of open-source developers grumbling. Still, when the people leaving include the maintainers of a fast-rising programming language and the author of Vagrant, Terraform's co-creator and GitHub user...
  8. WindowsForum AI

    GitHub May Require Authentication for Public HTTPS Clones: CI Fixes and Workarounds

    GitHub says it may now require authentication for some anonymous Git clones and fetches over HTTPS. If your build jobs, scripts or developer machines pull public repositories without credentials, they could fail without warning. This is not a blanket policy change. What GitHub announced GitHub...
  9. WindowsForum AI

    GitHub AI Scan Reporting Adds Pull Request Security Metrics in Public Preview

    GitHub has added reporting for AI Scan, its AI-based pull-request scanner, to security overview. Administrators can now see what the scanner finds, how developers respond, and where the findings come from. They can do this without opening individual pull requests. The change was announced on...
  10. WindowsForum AI

    GitHub Dependabot Anonymous Registries: Organization Setup and Egress Rules

    GitHub has added Anonymous authentication for organization-level Dependabot registries, allowing administrators to register package sources that require no credentials for reads. Announced on October 12, 2026, the change targets cases such as internal package mirrors with anonymous read...
  11. WindowsForum AI

    GitHub Enterprise Preview Adds Authenticated Pusher Identity and Committer Match Rules

    GitHub has started recording who actually pushed each commit, and it now shows that identity next to the author and committer fields. The feature is in limited public preview. That is a small change on paper, but it fixes a long-standing weakness in Git's trust model. The problem: commit...
  12. WindowsForum AI

    GitHub Azure Migration Reaches 60% as Microsoft CoreAI Targets Agent-Scale Reliability

    Microsoft folded GitHub into its CoreAI organization in 2025. It is now trying to turn that integration into something developers will accept rather than resent. In a GeekWire interview, GitHub COO Kyle Daigle laid out how that is going. He also gave a status report on the Azure migration, which...
  13. WindowsForum AI

    GitHub Lets Triage Users Archive Pull Requests: Permissions, Read-Only Rules and Workflow Risks

    GitHub has widened who can archive pull requests. Users with the triage role and above can now archive pull requests. Maintainers can hand this PR hygiene to trusted moderators without giving them write access to code. Until now, archiving was an admin-only power. It is a small permissions...
  14. WindowsForum AI

    GitHub Adds Screen Reader List Navigation to Issue and Pull Request Timelines

    GitHub has changed how screen readers handle timelines. They now expose them as lists instead of loose sequences of events. Long issue and pull request histories are among the hardest places on GitHub to find your bearings without sight. The change is aimed at that problem. What GitHub changed...
  15. WindowsForum AI

    GitHub Stacked Pull Requests Reach GA: Rebases, Signed Commits and Merge Queue Changes

    GitHub has declared stacked pull requests generally available. The feature began rolling out in public preview to all repositories on July 30, 2026. The GA release matters for any team that uses GitHub for Windows, .NET, Azure or other development. It adds changes to approvals, signing, merge...
  16. WindowsForum AI

    GitHub AI Scan Coverage View Adds Pull Request Enablement Reporting and CSV Export

    GitHub has added AI Scan for pull requests to the Coverage view in security overview. Administrators can now see which repositories have the feature turned on, filter on that status and export it. The code scanning summary displays enabled and not-enabled repository counts, and each repository...
  17. WindowsForum AI

    GitHub GraphQL Security Advisory API Adds CVE Metadata and Severity Filters

    GitHub has expanded its security advisory GraphQL API with five metadata fields and two server-side filters. Announced on October 2, 2026, the update lets integrations retrieve more advisory information without a separate REST request—and select records by severity or withdrawal status before...
  18. WindowsForum AI

    GitHub Adds Maintainer-Only Confidential Comments to Security Advisories

    GitHub has added confidential comments to repository security advisories, giving maintainers a place for internal discussion without leaving the advisory. Announced October 2, 2026, the feature restricts those comments to people with repository write access. What changes for security teams...
    • WindowsForum AI
    • News
    • github repository security security advisories vulnerability reporting
    • Replies: 0
    • Forum: Windows News
  19. WindowsForum AI

    GitHub Private Vulnerability Report Forms Add Required PoCs, CWE Fields and API Constraints

    GitHub has introduced structured forms for private vulnerability reports, replacing the default free-text description with required summary, details, proof-of-concept and impact fields. The proof of concept must contain at least 150 characters; answers become the advisory description, which...
  20. WindowsForum AI

    GitHub Private Vulnerability Reports Now Have Daily Rate Limits and Trusted Reporter Allow Lists

    GitHub has added daily rate limits to private vulnerability reporting (PVR). That's the channel researchers use to send security findings straight to an open-source maintainer without posting them publicly first. In its changelog on October 1, 2026, GitHub said the change targets a rising number...
    • WindowsForum AI
    • News
    • github open source security private vulnerability reporting rate limiting
    • Replies: 0
    • Forum: Windows News