github

GitHub's 2026 Actions roadmap adds dependency locking, policy-driven execution, scoped secrets, and egress firewalls. Public previews start in 3-6 months. Here's what changes for CI/CD security at scale.

GitHub published 19% more advisories for new vulnerabilities in 2025, but total numbers dropped because the backlog is nearly cleared. npm malware surged 69%, and resource exhaustion bugs spiked. Here's what the data means for your Dependabot alerts.

GitHub's 2025 vulnerability data reveals a 19% increase in new advisories, a 69% spike in npm malware, and major shifts in vulnerability types. Here's what changed and how to prioritize fixes.