GitHub
Source reports covering GitHub. Stories will appear when analysis and community reactions are ready.
41 reports · page 1 of 1
Connected topics are temporarily unavailable. You can still browse stories below.
Source reports
The August 17 outage, and the work ahead
news
4 min read
GitHub suffered a 7-hour, 47-minute outage on August 17 that disrupted github.com, authentication, GitHub Actions, APIs, pull requests, issues, and Copilot worldwide. GitHub said traffic had reached a new peak when a critical infrastructure component in its Central US data center failed to scale, creating capacity pressure that spread across its systems. Most services recovered that day after teams rerouted traffic and isolated affected infrastructure, while some Copilot services took longer because client-side retry loops increased traffic during recovery. The outage was GitHub’s second significant August incident, following an August 6 GitHub Actions failure. GitHub said neither event resulted from a code or configuration change; both were capacity failures. Monthly commits grew from 1.4 billion in April to 2.9 billion, increasing system demand. Since April, GitHub has added more than 3 million CPU cores, 120 petabytes of high-speed storage, and additional network capacity, while accelerating its migration to Azure. Azure now handles about 58% of GitHub platform load and half of Git operations, up from 12% of platform load in May. GitHub plans to limit retries and apply retry budgets and variable timeouts between services, review lower-priority CPU and memory alerts, isolate critical systems, and remove shared dependencies. It is also developing an architecture intended to scale read capacity linearly for large monorepos.
Incident with Github.com
news
4 min read
GitHub.com is experiencing degraded performance, particularly in Git Operations. A problematic component has been identified and corrective actions are underway, but residual impacts are affecting multiple services.
GitHub Actions and Pages are experiencing degraded availability
news
2 min read
Multiple GitHub services are experiencing issues, causing workflow runs to fail or be delayed, and some queued jobs may time out. Engineers are implementing mitigations and rolling out a fix across all affected systems.
Stacked PRs are now live on GitHub
tool
3 min read
Stacked pull requests are now in public preview on GitHub, allowing users to break large changes into smaller, reviewable pull requests. This feature enables independent review of each pull request in a series, facilitating easier merging of changes with a single action.
What does GitHub's security team even do?
opinion
4 min read
Thousands of repositories on GitHub are currently distributing malware, accessible through the standard search function without special knowledge. Despite having a substantial budget, a dedicated security team, and AI resources, GitHub has not resolved this issue over the past two years.
DeepSeek pause fundraise after comments on compute gap to US leaked (transcript) [pdf]
tool
1 min read
The main branch of the repository liang-wenfeng-investor-meeting-2026-7-22 does not contain the file 梁文锋投资者交流会-文字稿_1_18_translate_20260723201651.pdf. Feedback is taken seriously and can be reviewed in the documentation.
Restructuring GitHub's bug bounty program
news
5 min read
GitHub is restructuring its bug bounty program to enhance collaboration with the security research community and improve overall platform safety. Changes to the program aim to better recognize and reward researchers for identifying and reporting vulnerabilities.
GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos
research
5 min read
Noma Labs identified a prompt injection vulnerability in GitHub's Agentic Workflows, allowing unauthenticated attackers to access private repository data by posting a crafted GitHub Issue in a public repository within the same organization. This vulnerability has been named GitLost.
Fired by Google for creating the Google workspace CLI
tool
1 min read
Two months ago I was fired by Google for creating the Google Workspace CLI. It went viral, hit #1 on Hacker News, gained thousands of GitHub stars and many thousands of actual users in just a couple days. It was an incredible, confusing journey, from directors and leaders asking what they could learn from the tool to getting grilled by legal about why the Google logo and brand colors are on the Go...
I found 10k GitHub repositories distributing Trojan malware
news
8 min read
A large-scale malware distribution campaign on GitHub has been identified, involving 10,000 repositories that distribute Trojan malware. These repositories originate from different contributors and share a common pattern, enabling the creation of a script to find them.
Microsoft turns to AWS as GitHub faces AI capacity crunch
news
1 min read
Microsoft is adding Amazon Web Services capacity to GitHub to manage increased coding activity driven by AI advancements. This decision deviates from the original strategy of fully integrating GitHub's infrastructure with Microsoft's Azure cloud.
Ponytail – make your AI agent think like the laziest senior dev in the room
tool
4 min read
Ponytail integrates a senior developer's mindset into AI agents, enabling them to significantly reduce code complexity by writing one line instead of fifty. This results in 80-94% less code, 3-6 times faster execution, and 47-77% cost savings.
GitHub Copilot App
tool
1 min read
GitHub Copilot app provides a unified desktop experience for agent-driven development, allowing users to manage issues and pull requests directly within the app. Users with Copilot Pro, Pro+, Max, Business, or Enterprise subscriptions can install the app immediately, while others can join a waitlist for future access.
GitHub and the crime against software
opinion
54 min read
GitHub is currently experiencing downtime, highlighting ongoing issues with its reliability, security, and performance. This situation reflects broader infrastructural decay within GitHub and the larger tech software services sector.
GitHub bans security researcher who posted zero-day Windows exploits
news
6 min read
Microsoft's GitHub has banned security researcher Nightmare-Eclipse after they posted zero-day Windows exploits. The researcher claims this action has ruined their life and has promised further retaliation against the company.
I'm Tired of Talking to AI
opinion
1 min read
Malware was found in GitHub repositories, prompting a user to seek advice from AI, which provided unhelpful responses. Subsequent comments in a GitHub discussion echoed the AI's answers, leading to a call-out and deletion of a comment.
GitHub Is Sinking
opinion
3 min read
GitHub's performance has declined significantly since its acquisition by Microsoft, with users reporting frequent issues and a concerning uptime status. The platform is perceived as less appealing, leading to frustration among regular users.
Red Squares – GitHub outages as contributions
opinion
1 min read
Red Squares is a satirical graph that uses red squares to track outages on GitHub.com, contrasting with the traditional green squares that represent code commits. The visual representation highlights the frequency and duration of platform downtime.
Update on "Co-authored-by: Copilot" in commit messages
tool
2 min read
Version 1.110 of Visual Studio Code introduces a setting to include Copilot as a coauthor in commit messages by appending "Co-authored-by: Copilot <copilot@github.com>". The setting git.addAICoAuthor offers three values: off (no attribution), conditional attribution based on Copilot's assistance, and always add attribution.
GitHub RCE Vulnerability: CVE-2026-3854 Breakdown
research
7 min read
Wiz Research identified a critical vulnerability (CVE-2026-3854) in GitHub's internal git infrastructure that allows authenticated users to execute arbitrary commands on backend servers with a single git push command. This vulnerability is notable as one of the first critical flaws found in closed-source binaries using AI.
GitHub Actions is the weakest link
opinion
1 min read
GitHub Actions has been identified as a potential security vulnerability due to its permissive nature and reliance on third-party actions. Misconfigurations and lack of oversight can lead to unauthorized access and execution of malicious code.
An Update on GitHub Availability
news
6 min read
GitHub plans to increase its capacity by 10X starting in October 2025 to enhance reliability and failover capabilities. Recent incidents have prompted the company to take action to improve service availability.
Hear your agent suffer through your code
tool
2 min read
Endless Toil is a plugin that plays recorded human groans in response to the complexity of the code being processed by a coding agent. Users must clone the repository, open it in Codex Desktop, and manually activate the plugin in a new thread for it to function.
Incident with Multple GitHub Services
news
1 min read
An incident affecting multiple GitHub services has been resolved, with webhooks now operating normally. The degradation impacting Actions and Copilot has been mitigated, and monitoring is ongoing to ensure stability.
GitHub CLI now collects pseudoanonymous telemetry
tool
2 min read
GitHub CLI collects pseudonymous telemetry to improve the product and gain insights into feature usage. This data helps prioritize development and assess whether features meet user needs.
GitHub's Fake Star Economy
research
16 min read
A CMU study identified 6 million fake stars across 18,617 GitHub repositories, primarily from 301,000 accounts, with AI/LLM repositories being the largest non-malicious category. Fake stars are sold for prices ranging from $0.03 to $0.85 on various platforms, including Fiverr and Telegram.
GitHub Stacked PRs
tool
2 min read
GitHub's Stacked PRs feature allows users to arrange pull requests in an ordered stack, enabling the merging of all stacked PRs with a single click. Each pull request represents a focused layer of changes, which can be reviewed independently before being merged together.
Media scraper Gallery-dl is moving to Codeberg after receiving a DMCA notice
news
6 min read
FAKKU, LLC has issued a DMCA takedown notice regarding gallery-dl and 28 other repositories, requesting the removal of certain files. The recipient is considering switching platforms rather than rewriting the entire repository history to comply with the notice.
GitHub's Historic Uptime
research
1 min read
GitHub's historical uptime charts display monthly uptime statistics from 2016 to 2026. Users can visualize the platform's reliability trends over the specified period.
GitHub backs down, kills Copilot pull-request ads after backlash
news
3 min read
GitHub has removed Copilot's feature that allowed it to insert advertisements, referred to as "tips," into pull requests after receiving backlash from developers. A product manager acknowledged that allowing Copilot to alter others' pull requests was a misjudgment.
1.5M GitHub pull requests have had ads injected into them by Microsoft Copilot
news
3 min read
Microsoft Copilot now injects advertisements into pull requests on GitHub. This change reflects the growing need for monetization in the generative AI sector amidst rising operational costs.
Updates to GitHub Copilot interaction data usage policy
news
3 min read
GitHub will use interaction data from Copilot Free, Pro, and Pro+ users to train and improve AI models starting April 24, unless users opt out. Copilot Business and Copilot Enterprise users are not impacted by this policy change.
GitHub appears to be struggling with measly three nines availability
news
2 min read
GitHub is currently experiencing significant availability issues, with outages affecting Actions, pull requests, notifications, and Copilot. The platform has reported problems with "some GitHub services" as of February 9.
Prompt Injecting Contributing.md
opinion
3 min read
Over the past year, the volume of pull requests for the awesome-mcp-servers GitHub repository increased significantly, with daily submissions reaching 20 to 50 or more. Approximately 50% of these pull requests are generated by bots, leading to challenges in maintaining the quality of contributions.
Translate Garry Tan's LinkedIn-speak to plain English
tool
4 min read
A pull request by tornikeo aims to translate the README of the gstack repository from LinkedIn jargon to plain English. The change is intended to enhance accessibility and understanding for users unfamiliar with the original terminology.
Glassworm Is Back: A New Wave of Invisible Unicode Attacks Hits Repositories
news
4 min read
Glassworm malware has re-emerged, compromising over 150 GitHub repositories, npm, and VS Code through the use of hidden Unicode characters. This resurgence follows previous activity traced back to the same threat actor, highlighting ongoing vulnerabilities in these platforms.
GitHub Is Having Issues
news
2 min read
The incident with Copilot and Actions has been resolved, with all services recovering and operating normally. A detailed root cause analysis will be shared when available.
Another GitHub outage in the same day
news
2 min read
All services, including Actions, Codespaces, Git Operations, Issues, Packages, Pages, Pull Requests, and Webhooks, are operating normally. A detailed root cause analysis of the incident will be shared when available.
GitHub Is Down
tool
2 min read
GitHub offers a platform for developers to collaborate on code, providing tools like GitHub Copilot for writing, testing, and fixing code efficiently. The platform enhances workflows from initial coding to final deployment with AI and automation features.
GitHub Agentic Workflows
tool
2 min read
GitHub Agentic Workflows automate repository management tasks such as issue triaging, CI failure analysis, documentation maintenance, test coverage improvements, and compliance monitoring. These workflows operate through automated agents in GitHub Actions, utilizing a security-first design and simple markdown file configurations.
GitHub Browser Plugin for AI Contribution Blame in Pull Requests
5 min read
GitHub now supports a browser plugin for identifying AI contributions in pull requests. Users can integrate git-ai into their tooling, authenticate refined-github-ai-pr, and view AI annotations in their pull requests on GitHub.