On my blog: Normalizing Image Type and Size https://john.colagioia.net/blog/2023/04/05/file-type-size.html #linux #programming #techtips

What’s new with GitHub Sponsors
GitHub Sponsors is now generally available for organizations. Also, new tooling for bulk sponsorships and an update on how we’re ensuring sustainability for GitHub Sponsors. ⌘ Read more

Level up monitoring and reporting for your enterprise
A high-quality audit log is an essential tool for enterprises to ensure compliance, maintain security, investigate issues, and promote accountability. ⌘ Read more

Calling all open source maintainers
We are building a private space for maintainers to connect with peers, preview features, and learn from each other! ⌘ Read more

Aufkleber ?~L~X https://notiz.blog/p/6GC

On my blog: Developer Diary, Yuknoom Yich’aak K’ahk’ https://john.colagioia.net/blog/2023/04/03/yuknoom.html #programming #project #devjournal

On my blog: Free Culture Book Club — Snowbound Blood part 2 https://john.colagioia.net/blog/2023/04/01/snowbound-blood-2.html #freeculture #bookclub

On my blog: Toots 🐘 from 03/27 to 03/31 https://john.colagioia.net/blog/2023/03/31/week.html #linkdump #mastodon #socialmedia #week

CodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research
Learn more about static analysis and how to use it for security research!
In this blog post series, we will take a closer look at static analysis concepts, present GitHub’s static analysis tool CodeQL, and teach you how to leverage static analysis for security research by writing custom CodeQL queries. ⌘ Read more

On my blog: Real Life in Star Trek, Manhunt https://john.colagioia.net/blog/2023/03/30/manhunt.html #scifi #startrek #closereading

Improvements to CodeQL’s data flow library for C++
These changes will improve the experience for custom query authors and enable better precision in some of our standard queries. Learn how to enable them for your custom queries. ⌘ Read more

I just wrote a mega blog post that has been on my mind for months

logs/blog: adventures in uxn and crystal; logs/photojournal: moar

On my blog: Mastodon’s API (The Pitfalls) https://john.colagioia.net/blog/2023/03/29/mastodon-api.html #mastodon #programming #techtips

Enabling a No-Code Performance Testing Platform Using the Ddosify Docker Extension
Learn about the Ddosify Docker Extension and how use it for performance testing. ⌘ Read more

Containerizing an Event Posting App Built with the MEAN Stack
Learn how to containerize a MEAN stack application with Docker. ⌘ Read more

Introducing self-service SBOMs
Developers and compliance teams get a new SBOM generation tool for cloud repositories. ⌘ Read more

GitHub Galaxy 2023: Empower developer teams with a new developer experience
Learn how GitHub’s one, integrated platform–powered by AI and secure at every step—helps developer teams be more productive, collaborative, and efficient. ⌘ Read more

Announcing the GitHub Actions extension for VS Code
Today, we’re excited to announce the release of the public beta of the official GitHub Actions VS Code extension, which provides support for authoring and editing workflows and helps you manage workflow runs without leaving your IDE. ⌘ Read more

On my blog: Developer Diary, World Theatre Day https://john.colagioia.net/blog/2023/03/27/theatre.html #programming #project #devjournal

On my blog: Modern Social Media Etiquette https://john.colagioia.net/blog/2023/03/26/etiquette.html #rant #socialmedia #harm

On my blog: Free Culture Book Club — Snowbound Blood part 1 https://john.colagioia.net/blog/2023/03/25/snowbound-blood-1.html #freeculture #bookclub

We’re No Longer Sunsetting the Free Team Plan
We’re reversing course. After taking in feedback from the community, we’re no longer sunsetting the Free Team plan. ⌘ Read more

On my blog: Toots 🐘 from 03/20 to 03/24 https://john.colagioia.net/blog/2023/03/24/week.html #linkdump #mastodon #socialmedia #week

We updated our RSA SSH host key
At approximately 05:00 UTC on March 24, out of an abundance of caution, we replaced our RSA SSH host key used to secure Git operations for GitHub.com. ⌘ Read more

On my blog: Real Life in Star Trek, Up The Long Ladder https://john.colagioia.net/blog/2023/03/23/up-long-ladder.html #scifi #startrek #closereading

Effortlessly Build Machine Learning Apps with Hugging Face’s Docker Spaces
Learn about the Hugging Face Hub and how to use its Docker Spaces to build machine learning apps effortlessly. ⌘ Read more

Docker and Hugging Face Partner to Democratize AI
We’re excited to announce that Happy Face and Docker are partnering to democratize AI and make it more accessible to software engineers! ⌘ Read more

Docker and Ambassador Labs Announce Telepresence for Docker, Improving the Kubernetes Development Experience
We’re happy to announce Telepresence for Docker, simplifying how teams develop and test on Kubernetes for faster app delivery. ⌘ Read more

Build a secure code mindset with the GitHub Secure Code Game
Writing secure code is as much of an art as writing functional code, and it is the only way to write quality code. Learn how our Secure Code Game can provide you with hands-on training to spot and fix security issues in your code so that you can build a secure code mindset. ⌘ Read more

Announcing Docker+Wasm Technical Preview 2
Get the latest news on Docker+Wasm, including our work with partners to support more runtimes while making it easier to run Wasm workloads with Docker. ⌘ Read more

GitHub Copilot X: The AI-powered developer experience
GitHub Copilot is evolving to bring chat and voice interfaces, support pull requests, answer questions on docs, and adopt OpenAI’s GPT-4 for a more personalized developer experience. ⌘ Read more

On my blog: Developer Diary, International Day of Happiness https://john.colagioia.net/blog/2023/03/20/happiness.html #programming #project #devjournal

On my blog: Fiction — Bank on It https://john.colagioia.net/blog/2023/03/19/banks.html #freeculture #politics #scifi #fiction

On my blog: Free Culture Book Club — Delilah H. Smith https://john.colagioia.net/blog/2023/03/18/dhs.html #freeculture #bookclub

On my blog: Toots 🐘 from 03/13 to 03/17 https://john.colagioia.net/blog/2023/03/17/week.html #linkdump #mastodon #socialmedia #week

Partnering with EU policymakers to ensure the Cyber Resilience Act works for developers
We’re looking forward to working with policymakers to improve cybersecurity and support developers. ⌘ Read more

On my blog: Real Life in Star Trek, Samaritan Snare https://john.colagioia.net/blog/2023/03/16/samaritan-snare.html #scifi #startrek #closereading

We apologize. We did a terrible job announcing the end of Docker Free Teams.
We apologize for how we communicated and executed sunsetting Docker “Free Team” subscriptions, which alarmed the open source community. Read our FAQ to learn more. ⌘ Read more

Godot 4.0 Release Party 🎉
We are delighted to host the Godot 4.0 Release Party at GitHub HQ on Wednesday, March 22 from 6:30 pm to 9:30 pm. And you’re invited! ⌘ Read more

How the Grafana Alerting team scales their issue management with GitHub Projects
Hear from Grafana’s Armand Grillet about how his team uses GitHub Projects. ⌘ Read more

GitHub celebrates the ingenuity of developers with disabilities in new video series
Learn how developers with disabilities are pushing the boundaries of accessibility with ingenuity, open source, and generative AI on The ReadME Project. ⌘ Read more

Highlights from Git 2.40
The first Git release of the year is here! Take a look at some of our highlights on what’s new in Git 2.40. ⌘ Read more

An open source project to empower OSPOs everywhere
We are open sourcing our own OSPO policies, tools, and guides to help other OSPOs get started. ⌘ Read more

Introducing Activating Developers and the new Digital Public Goods Open Source Community Manager Program
The Social Impact, Tech for Social Good team is launching a new Open Source Community Manager Program to support digital public goods. This is part of their new Activating Developers initiative. ⌘ Read more

On my blog: Developer Diary, Aztec New Year (Belated) https://john.colagioia.net/blog/2023/03/13/aztec.html #programming #project #devjournal

On my blog: Free Culture Book Club — Golem, part 2 https://john.colagioia.net/blog/2023/03/11/golem-2.html #freeculture #bookclub

On my blog: Toots 🐘 from 03/06 to 03/10 https://john.colagioia.net/blog/2023/03/10/week.html #linkdump #mastodon #socialmedia #week

Introducing GitHub vulnerability management integrations for security professionals
Learn about using GitHub Advanced Security alerts with vulnerability management tools. Check out the integrations and learn about how to get started. ⌘ Read more

Don’t leave developers behind in the Section 230 debate
Developers are at the heart of our online world and at the forefront of creating solutions for global challenges, working to make the software that underpins our digital infrastructure more secure, reliable, and safe. ⌘ Read more

On my blog: Real Life in Star Trek, Q Who? https://john.colagioia.net/blog/2023/03/09/q-who.html #scifi #startrek #closereading

How GitHub accelerates development for embedded systems
In a world where software and hardware is ubiquitous, GitHub can help enable secure development for mission-critical embedded systems. ⌘ Read more

Raising the bar for software security: GitHub 2FA begins March 13
On March 13, we will officially begin rolling out our initiative to require all developers who contribute code on GitHub.com to enable one or more forms of two-factor authentication (2FA) by the end of 2023. Read on to learn about what the process entails and how you can help secure the software supply chain with 2FA. ⌘ Read more

How GitHub Docs’ new search works
GitHub Docs recently changed its site-search to Elasticsearch. Here’s how it was implemented. ⌘ Read more

Multi-repository variant analysis: a powerful new way to perform security research across GitHub
Multi-repository variant analysis lets you scale security research across thousands of repositories, giving you a powerful tool to find and respond to newly discovered vulnerabilities. ⌘ Read more

Distributed Cloud-Native Graph Database with NebulaGraph Docker Extension
Let’s take a look at NebulaGraph and how this modern, open source database can help your organization store and query complex data relationships. ⌘ Read more

Application security orchestration with GitHub Advanced Security
Learn how teams can leverage the power of GitHub Advanced Security’s code scanning and GitHub Actions to integrate the right security testing tools at the right time. ⌘ Read more

GitHub Galaxy 2023: your guide to building a more flexible and productive software development cycle
Join us virtually on March 28-31 for GitHub Galaxy, a global enterprise event focused on improving efficiency, security, and developer productivity. ⌘ Read more

GitHub Enterprise Server 3.8 is now generally available
With updates to GitHub Actions, repositories, and GitHub Advanced Security, this new version of GitHub Enterprise Server is focused on bringing the best developer experience to companies. ⌘ Read more

File editing on GitHub Mobile keeps leveling up
Commit an update to a pull request, or start a new branch to squash a bug at any time, wherever you are using the GitHub Mobile apps. ⌘ Read more

Unleash your potential with GitHub Octernships: a path to a thriving tech career
Empowering the next generation of students in tech with real-world industry experience. ⌘ Read more

How to automate your dev environment with dev containers and GitHub Codespaces
GitHub Codespaces enables you to start coding faster when coupled with dev containers. Learn how to automate a portion of your development environment by adding a dev container to an open source project using GitHub Codespaces. ⌘ Read more

On my blog: Developer Diary, European Day of the Righteous https://john.colagioia.net/blog/2023/03/06/righteous.html #programming #project #devjournal

Release Radar · February 2023 Edition
Our community—along with ourselves—took a much needed break over the festive season. Now everyone is back into the full swing of work, and the open source community is showing us it’s all hands on deck. We had dozens of submissions for the February Release Radar—a testament to the amount of code being shipped by the […] ⌘ Read more

On my blog: Commenting Code https://john.colagioia.net/blog/2023/03/05/comments.html #rant #technology

On my blog: Free Culture Book Club — Golem, part 1 https://john.colagioia.net/blog/2023/03/04/golem-1.html #freeculture #bookclub

On my blog: Toots 🐘 from 02/27 to 03/03 https://john.colagioia.net/blog/2023/03/03/week.html #linkdump #mastodon #socialmedia #week

GitHub Security Lab audited DataHub: Here’s what they found
The GitHub Security Lab audited DataHub, an open source metadata platform, and discovered several vulnerabilities in the platform’s authentication and authorization modules. These vulnerabilities could have enabled an attacker to bypass authentication and gain access to sensitive data stored on the platform. ⌘ Read more

GitHub Desktop 3.2: Preview your pull request
GitHub Desktop helps you feel confident in your Git and GitHub workflows. ⌘ Read more

On my blog: Real Life in Star Trek, Pen Pals https://john.colagioia.net/blog/2023/03/02/pen-pals.html #scifi #startrek #closereading

Why Python keeps growing, explained
A deep dive into why more people are using Python than ever, its key use cases, and why it’s still so popular 30-plus years after it was first released. ⌘ Read more

GitHub Availability Report: February 2023
In February, we experienced three incidents that resulted in degraded performance across GitHub services. This report also sheds light into a January incident that resulted in degraded performance for GitHub Packages and GitHub Pages and another January incident that impacted Git users. ⌘ Read more

GitHub Actions Importer is now generally available
We’re excited to announce the general availability of GitHub Actions Importer. GitHub Actions Importer helps you plan, forecast, and automate migrations from Azure DevOps, CircleCI, GitLab, Jenkins, and Travis CI to GitHub Actions. This product is an extension of the official GitHub CLI and is available for free to any GitHub user starting today. Migrating […] ⌘ Read more

GitHub Actions: Introducing faster GitHub-hosted x64 macOS runners
Speed up your GitHub Actions jobs on macOS with all new, faster GitHub-hosted macOS runners for x64. ⌘ Read more

How to build a consistent workflow for development and operations teams
Explore how using GitHub and HashiCorp together enables enterprises to develop and ship to their customers faster and more secure with consistent workflows and actions. ⌘ Read more

10 things you didn’t know you could do with GitHub Codespaces
Unlock the full potential of GitHub Codespaces with these 10 tips and tricks! From generating AI images to running self-guided coding workshops, discover how to optimize your software development workflow with this powerful tool. ⌘ Read more

Secret scanning alerts are now available (and free) for all public repositories
Secret scanning alerts are now generally available for all public repositories. Admins can now turn on the alert experience with one click. ⌘ Read more

February Extensions: Easily Connect Local Containers to a Kubernetes Cluster and More
Find out what’s new this month in the Docker Extension Marketplace, including connecting local containers to a Kubernetes cluster and more! ⌘ Read more

Docker Desktop 4.17: New Functionality for a Better Development Experience
Read about the latest updates and functionality released with Docker Desktop 4.17, including Docker Scout and much more! ⌘ Read more

On my blog: Developer Diary, Marathi Language Day https://john.colagioia.net/blog/2023/02/27/marathi.html #programming #project #devjournal

On my blog: Five Phases of AI Grief https://john.colagioia.net/blog/2023/02/26/ai-grief.html #rant #technology

On my blog: Free Culture Book Club — Life Blood, chapters 26 – 29 https://john.colagioia.net/blog/2023/02/25/life-blood-9.html #freeculture #bookclub

On my blog: Toots 🐘 from 02/20 to 02/24 https://john.colagioia.net/blog/2023/02/24/week.html #linkdump #mastodon #socialmedia #week

3 ways to meet compliance needs without slowing down agility
Learn how to enable developer productivity and collaboration while staying secure and compliant. Stay compliant without slowing down your business. From security to CI/CD, automate every step of your software workflow—so your developers can stay focused on what matters most: building. ⌘ Read more

On my blog: Real Life in Star Trek, The Icarus Factor https://john.colagioia.net/blog/2023/02/23/icarus-factor.html #scifi #startrek #closereading

Measuring government policy on open source with a new dataset
Policymakers around the world are developing policies that impact how software gets built and who gets to build it, see the latest now. ⌘ Read more

The code that wasn’t there: Reading memory on an Android device by accident
CVE-2022-25664, a vulnerability in the Qualcomm Adreno GPU, can be used to leak large amounts of information to a malicious Android application. Learn more about how the vulnerability can be used to leak information in both the user space and kernel space level of pages, and how the GitHub Security Lab used the kernel space information leak to construct a KASLR bypass. ⌘ Read more

Responsible AI pair programming with GitHub Copilot
GitHub Copilot boosts developer productivity, but using it responsibly still requires good developer and DevSecOps practices. ⌘ Read more

Update on the future stability of source code archives and hashes
A look at what happened on January 30, what measures we’re putting in place to prevent surprises, and how we’ll handle future changes. ⌘ Read more

Secure Your Kubernetes Clusters with the Kubescape Docker Extension
Find out how to use the Kubescape Docker Extension for Kubernetes cluster security right from Docker Desktop. ⌘ Read more

On my blog: Developer Diary, World Day of Social Justice https://john.colagioia.net/blog/2023/02/20/social-justice.html #programming #project #devjournal

On my blog: Free Culture Book Club — Life Blood, chapters 23 – 25 https://john.colagioia.net/blog/2023/02/18/life-blood-8.html #freeculture #bookclub

On my blog: Toots 🐘 from 02/13 to 02/17 https://john.colagioia.net/blog/2023/02/17/week.html #linkdump #mastodon #socialmedia #week

blog: short note about why you should code it yourself

On my blog: Real Life in Star Trek, Time Squared https://john.colagioia.net/blog/2023/02/16/time-squared.html #scifi #startrek #closereading

ICYMI: CodeQL enhancements
Learn about CodeQL’s improved user experience and enhancements that let you scan new languages, detect new types of CWEs, and perform deeper analyses of your applications. ⌘ Read more

2022 Transparency Report
Looking back over a year’s worth of developer-first content moderation and, new in this report, making our data more accessible to researchers. ⌘ Read more

5 Developer Workstation Security Best Practices
Learn how Hardened Docker Desktop can help you follow the five most critical developer workstation security best practices. ⌘ Read more

Git security vulnerabilities announced
Git users are encouraged to upgrade to the latest version, especially if they use `git apply` or `git clone` against untrusted patches or repositories. ⌘ Read more

GitHub Copilot now has a better AI model and new capabilities
We’re launching new improvements to GitHub Copilot to make it more powerful and more responsive for developers. ⌘ Read more