The 2023 Open Source Program Office (OSPO) Survey is live!
Help quantify the state of enterprise open source by taking the 2023 OSPO survey. ⌘ Read more
Rooting with root cause: finding a variant of a Project Zero bug
In this blog, I’ll look at CVE-2022-46395, a variant of CVE-2022-36449 (Project Zero issue 2327), and use it to gain arbitrary kernel code execution and root privileges from the untrusted app domain on an Android phone that uses the Arm Mali GPU. I’ll also explain how root cause analysis of CVE-2022-36449 led to the discovery of CVE-2022-46395. ⌘ Read more
160% Year-over-Year Growth in Pulls of Red Hat’s Universal Base Image on Docker Hub
Docker and Red Hat celebrate a substantial year-over-year increase in Red Hat Universal Base Image pulls on Docker Hub. ⌘ Read more
How to automate a Microsoft Power Platform deployment using GitHub Actions
Low-code enables developers and non-developers to build custom applications and solutions with less effort. In this blog, we show you how to automate your low-code deployments using GitHub Actions. ⌘ Read more
Kelsey Hightower on leadership in open source and the future of Kubernetes
In this special episode of The ReadME Podcast, dedicated to GitHub’s Maintainer Month, Kelsey Hightower joins hosts Martin Woodward and Neha Batra to discuss his philosophy on fostering thriving open source communities and the importance of empathy to a maintainer’s success. ⌘ Read more
Announcing the public preview of GitHub Advanced Security for Azure DevOps
GitHub Advanced Security for Azure DevOps is now available for public preview, making GitHub’s same application security testing tools natively available on Azure Repos. ⌘ Read more
On my blog: Developer Diary, World Biodiversity Day https://john.colagioia.net/blog/2023/05/22/biodiv.html #programming #project #devjournal
On my blog: Free Culture Book Club — Death off the Cuff https://john.colagioia.net/blog/2023/05/20/death-cuff.html #freeculture #bookclub
Au-delà du blog
Un texte de Christophe F., suite à la rencontre entre lecteurs qui a eu lieu du 6 au 8 mai. Sur les blogs dissidents, complotistes ou négationnistes, les mauvaises nouvelles se suivent et se ressemblent toutes. Le lecteur désabusé, privé même de ces sursauts spontanés de rébellion séditieuse qui faisaient le bonheur des bandes-dessinées (et […] ⌘ Read more
On my blog: Toots 🐘 from 05/15 to 05/19 https://john.colagioia.net/blog/2023/05/19/week.html #linkdump #mastodon #socialmedia #week
Still undecided between TiddlyWiki, DokuWiki, Bear, Benotes, Memos, my blog software, standardnotes, apple notes and more. I like them all quite a bit, but standardnotes, the only one that has reall multiplatform is so fucking complicated to host on your own and then they have this stupid offline subscription thing that allows rich text or the block editor that works like notion. I also found codex docs which is really really nice. Unfortunately they lack proper authentication. 1 / 2
Happy Birthday Fediverse! ?~L~X https://notiz.blog/b/6Gg
On my blog: Real Life in Star Trek, The Survivors https://john.colagioia.net/blog/2023/05/18/survivors.html #scifi #startrek #closereading
9 tips to go from attendee to speaker at a tech conference
Here’s what you need to know to write a compelling session proposal and get on stage. ⌘ Read more
GitHub celebrates developers with disabilities on Global Accessibility Awareness Day
GitHub is the home for all developers and on this Global Accessibility Awareness Day we are thrilled to celebrate the achievements of disabled developers and recent ships that help them build on GitHub. ⌘ Read more
Inside GitHub: Working with the LLMs behind GitHub Copilot
Developers behind GitHub Copilot discuss what it was like to work with OpenAI’s large language model and how it informed the development of Copilot as we know it today. ⌘ Read more
How GitHub Copilot is getting better at understanding your code
With a new Fill-in-the-Middle paradigm, GitHub engineers improved the way GitHub Copilot contextualizes your code. By continuing to develop and test advanced retrieval algorithms, they’re working on making our AI tool even more advanced. ⌘ Read more
Design’s journey towards accessibility
Design can have a significant impact on delivering accessible experiences to our users. It takes a cultural shift, dedicated experts, and permission to make progress over perfection in order to build momentum. We’ve got a long way to go, but we’re starting to see a real shift in our journey to make GitHub a true home for all developers. ⌘ Read more
Addressing GitHub’s recent availability issues
GitHub recently experienced several availability incidents, both long running and shorter duration. We have since mitigated these incidents and all systems are now operating normally. Read on for more details about what caused these incidents and what we’re doing to mitigate in the future. ⌘ Read more
Boost Your Local Testing Game With LambdaTest Tunnel Docker Extension
Learn how the LambdaTest Tunnel Docker Extension can streamline your testing workflow. ⌘ Read more
On my blog: Developer Diary, Nabka Day https://john.colagioia.net/blog/2023/05/15/nabka.html #programming #project #devjournal
On my blog: Free Culture Book Club — Jectoons Random Vignettes https://john.colagioia.net/blog/2023/05/13/vignettes.html #freeculture #bookclub
On my blog: Toots 🐘 from 05/08 to 05/12 https://john.colagioia.net/blog/2023/05/12/week.html #linkdump #mastodon #socialmedia #week
This month on The ReadME Podcast: Balancing openness and control
Open vs. control: the paradox of open source. We take a look at the expectations of open source, how the definition has evolved, and when ‘closed to contributions’ is the right move. Tune in to the latest episode of The ReadME Podcast for more. ⌘ Read more
How I used GitHub Copilot to build a browser extension
Here’s how, in seven steps, I built my first browser extension with GitHub Copilot—and my three major takeaways about learning and pair programming in the age of AI. ⌘ Read more
On my blog: Real Life in Star Trek, The Ensigns of Command https://john.colagioia.net/blog/2023/05/11/ensigns-command.html #scifi #startrek #closereading
Navigation and search improvements for accessibility
Discover the accessibility features within our new navigation and code search which make it easier to use for many more people. ⌘ Read more
Unlocking inclusive design: how Primer’s color system is making GitHub.com more inclusive
How Primer’s updated light and dark theme color contrast strategy resolved hundreds of color-contrast-related accessibility issues over one thousand use cases. ⌘ Read more
Docker Init: Initialize Dockerfiles and Compose files with a single CLI command
This article introduces `docker init`, a new beta feature that simplifies the process of adding Docker to a project. ⌘ Read more
Revolutionize your open source workflows: the top 3 reasons why GitHub Codespaces is a must-have for maintainers
GitHub Codespaces is reliable, accessible, and always-ready. Try it out during Maintainer Month and take your projects to new heights! ⌘ Read more
Game Bytes · May 2023
Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on! ⌘ Read more
On my blog: Graphs with Chart.js https://john.colagioia.net/blog/2023/05/10/chart-js.html #linux #programming #techtips
How companies are boosting productivity with generative AI
Explore how generative AI coding tools are changing the way developers and companies build software. ⌘ Read more
How to fix a ReDoS
Code scanning detects ReDoS vulnerabilities automatically, but fixing them isn’t always easy. This blog post describes a 4-step strategy for fixing ReDoS bugs. ⌘ Read more
Push protection is generally available, and free for all public repositories
Announcing the general availability of push protection–a feature that proactively prevents secret leaks in your public and private repositories. ⌘ Read more
How we work: inclusive retrospectives for the GitHub Accessibility leadership team
Learn about tools and processes the GitHub Accessibility leadership team uses for retrospectives that fully engage every team member. ⌘ Read more
GitHub code search is generally available
The world’s code is now at your fingertips. ⌘ Read more
Building a culture of innovation in your business with GitHub
Consider the typical software development practices in an organization. Projects are commonly closed, and causes friction across engineering teams. But open source communities work asynchronously, openly, remotely and at global-scale. What if our internal teams could reuse those same practices? ⌘ Read more
On my blog: Developer Diary, WWII Remembrance https://john.colagioia.net/blog/2023/05/08/remembrance.html #programming #project #devjournal
On my blog: Free Culture Book Club — Expedition Sasquatch, part 3 https://john.colagioia.net/blog/2023/05/06/sasquatch-3.html #freeculture #bookclub
On my blog: Toots 🐘 from 05/01 to 05/05 https://john.colagioia.net/blog/2023/05/05/week.html #linkdump #mastodon #socialmedia #week
Building a more inclusive GitHub Global Campus
Every student and teacher deserves the same access to GitHub Education offerings. We’ve enlisted GitHub’s Accessibility team to help identify areas for improving inclusivity. ⌘ Read more
Web Summit Rio 2023: Building an app in 18 minutes with GitHub Copilot X
GitHub CEO Thomas Domke demonstrated the power of GitHub Copilot X live on stage. ⌘ Read more
On my blog: Real Life in Star Trek, Evolution https://john.colagioia.net/blog/2023/05/04/evolution.html #scifi #startrek #closereading
Manage your application security stack effectively with the tool status page
Code scanning’s tool status gives you a bird’s eye view of your application security stack, allowing you to quickly confirm everything is working, or troubleshoot any tool in your application security arsenal. ⌘ Read more
All In for Students 2023 cohort: our biggest group of open source leaders yet!
The second cohort of All In for Students has graduated! With a cohort 12 times as large as the pilot, learn about how this group of college students is leaning into the future of technology. ⌘ Read more
GitHub Availability Report: April 2023
In April, we experienced four incidents that resulted in degraded performance across GitHub services. This report also sheds light into three March incidents that resulted in degraded performance across GitHub services. ⌘ Read more
More than meets the pull request: maintainers talk contributions
Creating an open source project can feel a bit like sending out an open invite to a party—will it be a roaring good time, or will you unbegrudginly dine on leftover junk food for the following week after nobody shows? When the first guest arrives, you breathe a sigh of relief. The party’s a success, […] ⌘ Read more
Building a Local Application Development Environment for Kubernetes with the Gefyra Docker Extension
Gefyra is an easy-to-use Docker Desktop extension that connects with Kubernetes to improve development workflows and team collaboration. We show how to install and configure Gefyra in this article. ⌘ Read more
Dependabot relieves alert fatigue from npm devDependencies
A new alert rules engine for Dependabot leverages alert metadata to identify and auto-dismiss up to 15% of alerts as false positives. ⌘ Read more
Docker Desktop 4.19: Compose v2, the Moby project, and more
Docker Desktop 4.19 includes performance enhancements, new language support, and a Moby update. Container-to-host networking performance is 5x faster on macOS, and Docker Init supports Python and Node.js. ⌘ Read more
On my blog: Developer Diary, International Workers’ Day https://john.colagioia.net/blog/2023/05/01/workers.html #programming #project #devjournal
On my blog: Free Culture Book Club — Expedition Sasquatch, part 2 https://john.colagioia.net/blog/2023/04/29/sasquatch-2.html #freeculture #bookclub
On my blog: Toots 🐘 from 04/24 to 04/28 https://john.colagioia.net/blog/2023/04/28/week.html #linkdump #mastodon #socialmedia #week
This month on The ReadME Podcast: exploring the fusion of technology and progress
Open source’s impact on nuclear fusion research, adapting to technological change, and mastering GitHub essentials. ⌘ Read more
On my blog: Real Life in Star Trek, Season 2, TNG https://john.colagioia.net/blog/2023/04/27/ng-season-2.html #scifi #startrek #closereading
CLI tricks every developer should know
Learn some tips, tricks, and tools for mastering the command line from GitHub’s own developers. ⌘ Read more
A VirusTotal introduziu agora a ferramenta de Inspeção de código usando IA generativa para reforçar a análise de ameaças.
logs/blog: building a computer desktop environment just cuz
Git security vulnerabilities announced
A new set of Git releases were published to address a variety of security vulnerabilities. All users are encouraged to upgrade. Take a look at GitHub’s view of the latest round of releases. ⌘ Read more
Gearing up for Maintainer Month this May!
Are you looking for ways to support open source maintainers? Maintainer Month is the perfect opportunity! ⌘ Read more
QOA Benchmark Results and File Format Specification
The specification for the Quite OK Audio Format,
announced in a previous blog post,
is now finalized. QOA is a lossy audio compression format. Typical audio
signals (44100hz, stereo) are encoded into 278 kbits/s, or more precisely 3.2
bits per sample – exactly 1/5 of the bits needed for an uncompressed WAV.
The QOA-Specification [fits on a single … ⌘ Read more
Shaping the GitHub of the future as COO
GitHub is driving the future of software development and, after 10 years as a Hubber, I’m more energized than ever as I take on the role of COO to help bring our vision to life. ⌘ Read more
On my blog: Developer Diary, Fashion Revolution Day https://john.colagioia.net/blog/2023/04/24/fashion.html #programming #project #devjournal
On my blog: Why Federate? https://john.colagioia.net/blog/2023/04/23/federation.html #rant #socialmedia #fediverse
On my blog: Free Culture Book Club — Expedition Sasquatch, part 1 https://john.colagioia.net/blog/2023/04/22/sasquatch-1.html #freeculture #bookclub
On my blog: Toots 🐘 from 04/17 to 04/21 https://john.colagioia.net/blog/2023/04/21/week.html #linkdump #mastodon #socialmedia #week
Tillitis TKey
The Tillitis TKey, which I first wrote about in September last year,
is now available for sale at the the Tillitis webshop.
The TKey is a small bare-bones RISC-V computer in a USB stick form
factor with no persistent storage that measures apps uploaded to it
and derives a deterministic secret every time the same app is started.
You can use it, for instance, as a security token to keep your private
key and do signing operations. Everyt … ⌘ Read more
On my blog: Real Life in Star Trek, Shades of Gray https://john.colagioia.net/blog/2023/04/20/shades-gray.html #scifi #startrek #closereading
Announcing GitHub Actions Deployment Protection Rules, now in public beta
Create and share your own deployment protection rules, or use the rules from our great partners, like Datadog, Honeycomb, New Relic, NodeSource, Sentry, and ServiceNow, to control your deployments with more confidence. And the API is open for the community to build their own rules to make GitHub Enterprise Cloud even better. ⌘ Read more
Docker Compose Experiment: Sync Files and Automatically Rebuild Services with Watch Mode
Starting with Compose v2.17, we’re excited to share an early look at the new development-specific configuration in Compose YAML as well as an experimental file watch command. ⌘ Read more
Private vulnerability reporting now generally available
Open source maintainers and security researchers embrace a new best practice to report and fix vulnerabilities. ⌘ Read more
Introducing npm package provenance
How to verifiably link npm packages to their source repository and build instructions. ⌘ Read more
GitHub joins industry commitment to curb cyber mercenaries
GitHub is proud to join 40 companies endorsing the Cybersecurity Tech Accord principles limiting offensive operations in cyberspace. ⌘ Read more
Multi-repository enablement: effortlessly scale code scanning across your repositories
We’ve gotten great feedback on default setup, a simple way to set up code scanning on your repository. Now, you have the ability to use default setup across your organization’s repositories, in just one click. ⌘ Read more
On my blog: Developer Diary, Lena Massacre https://john.colagioia.net/blog/2023/04/17/lena.html #programming #project #devjournal
On my blog: Free Culture Book Club — Snowbound Blood part 4 https://john.colagioia.net/blog/2023/04/15/snowbound-blood-4.html #freeculture #bookclub
On my blog: Toots 🐘 from 04/10 to 04/14 https://john.colagioia.net/blog/2023/04/14/week.html #linkdump #mastodon #socialmedia #week
3 benefits of migrating and consolidating your source code
Explore how migrating your source code and collaboration history to GitHub can lead to some surprising benefits. ⌘ Read more
How generative AI is changing the way developers work
Rapid advancements in generative AI coding tools like GitHub Copilot are accelerating the next wave of software development. Here’s what you need to know. ⌘ Read more
On my blog: Real Life in Star Trek, Peak Performance https://john.colagioia.net/blog/2023/04/13/peak-performance.html #scifi #startrek #closereading
Ensuring compliance in developer workflows
How GitHub Enterprise ensures secure and compliant developer workflows for highly regulated industries. ⌘ Read more
GitHub Accelerator: our first cohort and what’s next
Meet the individuals that make up the first GitHub Accelerator cohort and learn about how GitHub is helping bring their visions to reality. ⌘ Read more
Introducing the newest GitHub Shop collection
From dog bowl bottles to fanny packs, explore the latest and greatest GitHub merchandise. ⌘ Read more
Generative AI-enabled compliance for software development
Explore how generative AI may soon help enable optimizing some of the foundational components of compliance. ⌘ Read more
How enabling developers can help drive financial inclusion
Explore how creating a great developer experience can help provide a more inclusive financial services environment. ⌘ Read more
On my blog: Developer Diary, Siblings Day https://john.colagioia.net/blog/2023/04/10/siblings.html #programming #project #devjournal
On my blog: Great Ideas from Terrible Jobs https://john.colagioia.net/blog/2023/04/09/ideas.html #rant #career
On my blog: Free Culture Book Club — Snowbound Blood part 3 https://john.colagioia.net/blog/2023/04/08/snowbound-blood-3.html #freeculture #bookclub
On my blog: Toots 🐘 from 04/03 to 04/07 https://john.colagioia.net/blog/2023/04/07/week.html #linkdump #mastodon #socialmedia #week
What developers need to know about generative AI
Generative AI has been dominating the news lately—but what exactly is it? Here’s what you need to know, and what it means for developers. ⌘ Read more
Game Bytes · April 2023
Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on! ⌘ Read more
On my blog: Real Life in Star Trek, The Emissary https://john.colagioia.net/blog/2023/04/06/emissary.html #scifi #startrek #closereading
Building GitHub with Ruby and Rails
Since the beginning, GitHub.com has been a Ruby on Rails monolith. Today, the application is nearly two million lines of code and more than 1,000 engineers collaborate on it daily. We deploy as often as 20 times a day, and nearly every week one of those deploys is a Rails upgrade. Upgrading Rails weekly Every […] ⌘ Read more
Pwning Pixel 6 with a leftover patch
In this post, I’ll look at a security-related change in version r40p0 of the Arm Mali driver that was AWOL in the January update of the Pixel bulletin, where other patches from r40p0 was applied, and how these two lines of changes can be exploited to gain arbitrary kernel code execution and root from a malicious app. This highlights how treacherous it can be when backporting security changes. ⌘ Read more
Bring your enterprise together with enterprise accounts for all
With enterprise accounts for all, your organization can take advantage of all that GitHub Enterprise has to offer, from GitHub Actions and GitHub Advanced Security, to Copilot. ⌘ Read more
Docker Desktop 4.18: Docker Scout Updates, Container File Explorer GA
Docker Desktop 4.18 brings new CLI features in Docker Scout and Docker init, a CLI Beta feature to help you quickly add Docker to any project, and more. ⌘ Read more
GitHub Availability Report: March 2023
In March, we experienced six incidents that resulted in degraded performance across GitHub services. This report also sheds light into a February incident that resulted in degraded performance for GitHub Codespaces. ⌘ Read more
Building organization-wide governance and re-use for CI/CD and automation with GitHub Actions
Many of us are aware of the benefits that a strong focus on automation can bring, particularly in our development workflow and DevOps lifecycle. But silos across businesses can lead to duplication of effort, and potential to lose out on best practices. In this post, we’ll explore how CI/CD can be shared across your entire organization alongside polici … ⌘ Read more