没有人靠段子永载GitHub，除非谷歌姐夫

没有人靠段子永载GitHub，除非谷歌姐夫
量子位
量子位 ·

GitHub Agentic Workflows are in public preview. Find out all about them here.

Getting Started with GitHub Agentic Workflows
KDnuggets
KDnuggets ·
Safari 云签名在 GitHub Actions 中的两个陷阱

Safari 云签名在 GitHub Actions 中的两个陷阱
rxliuli blog
rxliuli blog ·
How the GitHub legal team used Copilot CLI to streamline their workflows

How the GitHub legal team used Copilot CLI to streamline their workflows
The GitHub Blog
The GitHub Blog ·

By replacing manual issue verification with isolated AI subagents running in GitHub Actions, the Astro maintainers reduced open issue count by 85%. This post explores the architecture behind...

How we built a software factory to drive Astro’s GitHub issue count to zero
The Cloudflare Blog
The Cloudflare Blog ·
Astro’s GitHub issue backlog is heading to zero for the first time in 5 years. Now Cloudflare is open-sourcing the tool that did it.

Astro’s GitHub issue backlog is heading to zero for the first time in 5 years. Now Cloudflare is open-sourcing the tool that did it.
The New Stack
The New Stack ·
Alibaba’s AI coded for 16 days straight and every commit is on GitHub

Alibaba’s AI coded for 16 days straight and every commit is on GitHub
The New Stack
The New Stack ·
GitHub 热门项目周刊 · 第 22 期 · 2026 年第 32 周

GitHub 热门项目周刊 · 第 22 期 · 2026 年第 32 周
浅时光博客
浅时光博客 ·

Instead of immediately opening pull requests when newer dependency versions are released, Dependabot now waits three days before suggesting upgrades, thus increasing the likelihood that malicious...

GitHub Introduces Default "Cooldown" Policy for Dependabot Version Updates
InfoQ
InfoQ ·
Disrupting supply chain attacks on npm and GitHub Actions

Disrupting supply chain attacks on npm and GitHub Actions
The GitHub Blog
The GitHub Blog ·
GitHub 热门项目周刊 · 第 21 期 · 2026 年第 31 周

GitHub 热门项目周刊 · 第 21 期 · 2026 年第 31 周
浅时光博客
浅时光博客 ·
印度政府要求GitHub在3小时内屏蔽基于蓝牙聊天应用BitChat 理由是无法监管

印度政府要求GitHub在3小时内屏蔽基于蓝牙聊天应用BitChat 理由是无法监管
蓝点网
蓝点网 ·

GitLost is a prompt-injection exploit discovered by Noma Security that tricks GitHub's new Agentic Workflows into leaking private data. By embedding concealed instructions within public GitHub...

Indirect Prompt Injection Exploits GitHub's AI Agent to Leak Private Repository Data
InfoQ
InfoQ ·
受AI冲击GitHub改革漏洞奖励计划 大幅度下调奖励金额 但升级VIP后奖励翻四倍

受AI冲击GitHub改革漏洞奖励计划 大幅度下调奖励金额 但升级VIP后奖励翻四倍
蓝点网
蓝点网 ·
GitHub tools are now an installable eve extension

GitHub tools are now an installable eve extension
Vercel News
Vercel News ·
Next chapter: Restructuring GitHub’s bug bounty program

Next chapter: Restructuring GitHub’s bug bounty program
The GitHub Blog
The GitHub Blog ·

GitHub redesigned GitHub Issues navigation using a client-side architecture that combines caching, predictive prefetching, and service workers to reduce perceived latency. The approach uses...

GitHub Increased Instant Navigation from 4% to 22% by Rethinking Client Side Architecture
InfoQ
InfoQ ·
使用 GitHub Actions 全自动发布 Safari 扩展

使用 GitHub Actions 全自动发布 Safari 扩展
rxliuli blog
rxliuli blog ·
GitHub 热门项目周刊 · 第 20 期 · 2026 年第 30 周

GitHub 热门项目周刊 · 第 20 期 · 2026 年第 30 周
浅时光博客
浅时光博客 ·

跟AI发闹骚学到的 https://github.com/isaacs/github/issues/330 Allowing CORS for the endpoint you mentioned would mean that you could complete this step of the Web flow from a browser: And this would mean...

为什么 Github OAuth 故意拦截 CORS
Est's Blog
Est's Blog ·
👤 个人中心
在公众号发送验证码完成验证