Skip to content
Changefeed.
GitHub

GitHub Advanced Security Release notes from GitHub

51 releases · 15 this month

RSS
Actions changelog
github.blog
RSS
Changelog
github.blog
RSS
Copilot changelog
github.blog
RSS

Every GitHub Advanced Security release

DateRelease
Sep 22Deprecation notice: All-platform CodeQL bundle
GitHub Advanced SecurityDeprecation
Sep 22Security improvements for SSH
GitHub Advanced SecurityUpdate
Sep 21GitHub Enterprise adds credential inventory exports
GitHub Advanced SecurityUpdate
Sep 18Manage the code coverage ruleset condition with the REST API
GitHub Advanced SecurityGA
Sep 18Stage-only npm tokens for safer automation
GitHub Advanced SecurityUpdate
Sep 16Code scanning AI Scan no longer requires CodeQL default setup
GitHub Advanced SecurityPreview
Sep 15Enforce GitHub Advanced Security configurations
GitHub Advanced SecurityUpdate
Sep 10AI Scan for pull request APIs in public preview
GitHub Advanced SecurityPreview
Sep 9Block pull requests with exposed secrets from merging
GitHub Advanced SecurityPreview
Sep 9GitHub Advanced Security expands trial availability
GitHub Advanced SecurityUpdate
Sep 9Remediate Code Quality findings with agentic autofix
GitHub Advanced SecurityUpdate
Sep 9CodeQL 2.27.0 adds support for Linux ARM64
GitHub Advanced SecurityUpdate
Sep 9npm extends recovery-code security holds to all accounts
GitHub Advanced SecurityUpdate
Sep 8Automatic Dependabot access to GitHub-hosted registries
GitHub Advanced SecurityUpdate
Sep 3Multiple trusted publishing configurations for npm
GitHub Advanced SecurityGA
Aug 25Block users directly from security advisories
GitHub Advanced SecurityUpdate
Aug 20Code scanning adds a mitigated alert dismissal reason
GitHub Advanced SecurityUpdate
Aug 20Track GitHub Code Quality enablement changes in the audit log
GitHub Advanced SecurityUpdate
Aug 19Track organization code quality trends
GitHub Advanced SecurityGA
Aug 18Credential revocation and deauthorization by token type
GitHub Advanced SecurityUpdate
Aug 13License data quality improvements
GitHub Advanced SecurityUpdate
Aug 7Secret scanning coverage updates
GitHub Advanced SecurityUpdate
Aug 4Code coverage automatic enablement in Code Quality settings
GitHub Advanced SecurityPreview
Aug 4CodeQL 2.26.2 adds Swift 6.3.3 and Kotlin 2.4.10 support
GitHub Advanced SecurityUpdate
Aug 4Customize Dependabot pull request branch names
GitHub Advanced SecurityUpdate
Aug 4Customize code scanning default setup at scale
GitHub Advanced SecurityUpdate
Jul 31Restricting npm bypass-2FA granular access tokens
GitHub Advanced SecurityUpdate
Jul 29CodeQL 2.26.1 improves analysis accuracy and framework coverage
GitHub Advanced SecurityUpdate
Jul 28Dependabot alerts on malicious packages across more ecosystems
GitHub Advanced SecurityUpdate
Jul 28npm publish-time malware scanning and dual-use metadata
GitHub Advanced SecurityUpdate
Jul 20GitHub Code Quality is now generally available
GitHub Advanced SecurityGA
Jul 15Improvements to secret scanning and public monitoring
GitHub Advanced SecurityUpdate
Jul 14Code scanning shows AI security detections on pull requests
GitHub Advanced SecurityUpdate
Jul 14Dependabot version updates introduce default package cooldown
GitHub Advanced SecurityUpdate
Jul 13GitHub Code Quality license estimate in public preview
GitHub Advanced SecurityPreview
Jul 13Manage secret scanning custom patterns via REST API
GitHub Advanced SecurityGA
Jul 10Clearer names for secret scanning detector types
GitHub Advanced SecurityUpdate
Jul 10CodeQL 2.26.0 adds Kotlin 2.4.0 support and AI prompt injection detection
GitHub Advanced SecurityUpdate
Jul 9Organization-level targeting for GitHub Code Quality
GitHub Advanced SecurityPreview
Jul 8npm install-time security and GAT bypass2fa deprecation
GitHub Advanced SecurityDeprecation
Jul 8Innersource security advisories are generally available
GitHub Advanced SecurityGA
Jul 7Secret scanning extended metadata and multipart validation
GitHub Advanced SecurityGA
Jul 2Secret scanning public monitoring for enterprises
GitHub Advanced SecurityPreview
Jul 1Secret scanning adds validators for Asana, IBM, and MessageBird
GitHub Advanced SecurityUpdate
Jun 30Dependabot no longer infers .npmrc
GitHub Advanced SecurityUpdate
Jun 30Open source license compliance is in public preview
GitHub Advanced SecurityPreview
Jun 30Upcoming access restrictions to public API endpoints and UI views
GitHub Advanced SecurityUpdate
Jun 30Upcoming cloud data retention policy for closed security alerts
GitHub Advanced SecurityUpdate
Jun 30GitHub code coverage merge protection for pull requests
GitHub Advanced SecurityPreview
Jun 25npm adds preventive account protection for high-impact accounts
GitHub Advanced SecurityUpdate
Jun 24Self-service credential revocation for incident response
GitHub Advanced SecurityUpdate

Summaries of vendors' own notes. Product names and logos belong to their owners; logos via logo.dev.

Other GitHub products

GitHub ActionsGitHub CopilotGitHub platform

Weekly: the week's data and AI releases, Tuesday mornings.