WinBuzzer

GitHub Actions Flaw Lets Pull Requests Reach Secrets and CI/CD Tokens

Cybersecurity firm Novee has identified a GitHub Actions workflow-chain risk that can expose secrets even when checks pass, ...

The GitHub Actions Attack Pattern Your CI Security Scanners Miss

ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't ...
Cryptopolitan on MSN

Cordyceps flaws let anyone with a free GitHub account hijack CI/CD pipelines at Microsoft, Google, and Apache

Security firm Novee has revealed Cordyceps as a class of exploitable CI/CD vulnerabilities across open-source repositories ...
Visual Studio Magazine

New GitHub Switch Limits Repo Issue Creation to Collaborators Only

After publicly touting pull request limits as a way to cut maintainer noise, GitHub is taking the same idea further with a new setting that lets repository admins restrict issue creation to ...
GIGAZINE

GitHub now allows users to set a limit on the number of pull requests that can be opened simultaneously, a measure to combat mass posting in the age of AI-generated content.

On June 17, 2026, GitHub added a new feature that limits the number of pull requests that a user without write permissions can open simultaneously in a single repository. Limit open pull requests for ...
TheServerSide

Want a private GitHub repository? It comes with a catch

Until now, the most compelling reason to opt into the GitHub Pro paid product was because it enabled you to create a private repository. Developers could use GitHub's free offering -- with a ...
GIGAZINE

GitHub has officially launched 'GitHub Stacked PRs,' enabling stacked pull requests, and will start with a private preview.

Stacked PRs on @GitHub are now in private preview. Join the waitlist and learn more below https://t.co/e1Yw4id5RM https://t.co/ZmK2wm1tV8 When developers write code ...