Martin Fowler

AUGUST 17, 2023

Paul Sobocinski writes a brief memo explaining how some of our teams have used TDD with GitHub Copilot. Naturally this leads to the question of how generative AI can help with this technique. As ever, co-pilot can't be relied on to fly the plane, but can suggest some useful ideas for the red and green steps.

TDD 224

TDD Test-Driven Development Generative AI Testing 224

Xebia

NOVEMBER 9, 2023

GitHub becoming the AI-powered developer platform Hello there , Broadcasting from GitHub Universe, I’m excited to share insights into the AI-infused features that GitHub has unveiled, aiming to transform it into the ultimate AI-powered developer platform. You can sign up for the private beta.

Software Review 130

Software Review Systems Review Generative AI .Net 130

Xebia

DECEMBER 16, 2023

To enable CodeQL on GitHub Enterprise Server you need to make sure you have GitHub Actions setup and running, including your own set of self-hosted runners. The default workflow that CodeQL will propose links to the github/codeql-action action, of which a static copy is installed with each Enterprise Server update.

Enterprise 130

Enterprise Linux Course Tools 130

Xebia

DECEMBER 16, 2023

At my customer we have the need to create a lot of GitHub Apps. In this specific case we use GitHub Apps as an integration point between GitHub and Jenkins: the code is moving to GitHub, and we still want to trigger our existing Jenkins jobs on code changes. GitHub handles the authentication and authorization.

Authentication 130

Authentication DevOps Enterprise Video 130

Xebia

DECEMBER 9, 2023

I am fascinated with the security aspects of using GitHub Actions for my own workloads since I have started using them. I’ve reported this information back to GitHub and they are planning to improve the freshness of the data in the Marketplace. Check out this guide I made: GitHub Actions Maturity Levels[6].

Analysis 130

Analysis Serverless Examples Report 130

Xebia

DECEMBER 9, 2023

Click to read the PDF version GitHub Actions [1] are a powerful way of creating a pipeline to act on events in GitHub. Make your own Octocat: [link] Tyranny of the default Every demo on GitHub Actions shows how easy it is to get started: add a text file with some actions in it and you are good to go.

Software Review 130

Software Review DevOps Examples Engineering 130

Xebia

DECEMBER 16, 2023

When customers start using GitHub Enterprise with Actions and private runners, there are some common gotcha’s you can run into. Even Dependabot comes along, since that runs on Actions as well for GitHub Enterprise Server. Guess how I turned off GitHub Actions for all users in our Production Environment?

Enterprise 130

Enterprise Storage Azure Internet 130

Xebia

DECEMBER 16, 2023

It’s up to the maintainer Even GitHub does not update (or create) all SemVer versions, so @v3 is not necessarily the latest thing for v3! <em> </em> What the runner does with semantic versioning of using GitHub Actions The runner that executes GitHub Actions for us is open source.

System 130

System Open Source Examples Windows 130

Xebia

SEPTEMBER 18, 2023

It comes as no surprise that the tags and branches solution to version GitHub Actions is weak at best. There have been rumors of Actions moving to a different model (GitHub Container Registry), but that is yet to see the light. To protect your GitHub Actions repository there are a few things the author of an Action should do.

Policies 130

Policies Malware Research Enterprise 130

Apiumhub

APRIL 14, 2024

If you are in the software development industry , then, most likely you have been using GitHub, a repository hosting service for Git that also has a web-based graphical interface. From individual developers to large organizations, GitHub has become an indispensable tool for anyone involved in software development.

Software Review 78

Software Review Case Study Open Source Recruiting 78

Xebia

DECEMBER 16, 2023

I am slowly diving into ‘Configuration as code’ for the GitHub Platform: all the things you want to automate with as few steps as possible, making big impact. These days I skip having a hard to manage setup and go to something really simple: github-script.

Examples 130

Examples Testing Training Organization 130

Xebia

OCTOBER 31, 2023

Dependabot alerts triaging in GitHub The GitHub UI displays a couple of helpful tips to use in triaging your Dependabot alerts which are super helpful. You can use this filter to only show the alerts where a patch is available: is:open has:patch The post Easy alert triaging for GitHub Dependabot appeared first on Xebia.

Examples 130

Examples Development DevOps 130

Xebia

DECEMBER 16, 2023

I notice a lot of people getting lost in their GitHub notifications. reasons for getting a notification Telling GitHub to send you a notification can happen in a few different ways. If your team uses discussions in GitHub to reach out to each other, this setting is often very useful to leave on. appeared first on Xebia.

Mobile 130

Mobile Exercises Organization Video 130

Xebia

DECEMBER 16, 2023

Check the GitHub status! Every once in a while there is an outage on e.g. GitHub Actions, and I see a lot of influx of users on this blogpost. So before you start reading this, check the GitHub status page to see if there is an outage. github/workflows/. If there is, you can wait until it is resolved. On: push then?

Testing 130

Testing Groups Authentication Windows 130

InfoWorld

FEBRUARY 27, 2024

GitHub Copilot Enterprise, an edition of the AI-based pair programming assistant that can be customized to an organization’s codebase and processes, is now generally available, GitHub announced on February 27. Chat conversations can be tailored to an organization’s repositories, with answers based on the organizational knowledge base.

Enterprise 75

Enterprise Knowledge Base Analysis Programming 75

Prisma Clud

SEPTEMBER 14, 2023

Learn how a novel attack vector in GitHub Actions allows attackers to distribute malware across repositories using a technique that exploits the actions dependency tree and puts countless open-source projects and internal repositories at risk. The 100-clone security measure, though, often proves inadequate for repositories hosting actions.

Malware 144

Malware Open Source Research Software 144

Xebia

DECEMBER 16, 2023

I’ve been discussing using GitHub Actions in a secure way for a while now (see here , and I got a question on how to improve your usage of actions. GitHub has no documented process for publishing an action or a security check on them: anyone can set up a public repository with the right content and then everyone can use it.

Software Review 130

Software Review Open Source Organization Engineering 130

TechCrunch

MARCH 3, 2023

Prog.ai , as the company is called, allows recruiters to search for developers based on their technical skills, libraries they have used or simply the contributions they have made to projects on GitHub. gleaning publicly available data and aligning it with the corresponding individual from GitHub. Analyze that So how does Prog.ai

Recruiting 246

Recruiting UI/UX Artificial Inteligence Open Source 246

Xebia

DECEMBER 16, 2023

I have been a fan of GitHub Actions since the beta in the end of 2019. Photo by Ashes Sitoula on Unsplash I am also fascinated with the security aspects of using GitHub Actions for my workloads. I’ve reported this information back to GitHub and they are planning to improve the freshness of the data in the Marketplace.

Analysis 130

Analysis Examples Course Serverless 130

DevOps.com

MAY 1, 2024

GitHub this week made available a formal technical preview of an approach to building software that uses generative artificial intelligence (AI) to complete tasks on behalf of a software engineering team.

Artificial Intelligence 60

Artificial Intelligence Artificial Inteligence Software Engineering Engineering 60

Xebia

DECEMBER 16, 2023

This is a GitHub action that will run the OSSF scorecard checks against your repository to see if you are following best practices, like having a security policy, using a code scanning tool, etc. Are GitHub Action versions pinned to SHA hashes, following best practices ? The final score is the average of all the weighted scores.

Open Source 130

Open Source Firewall Policies Examples 130

TechCrunch

APRIL 27, 2023

Ghostwriter — much like GitHub’s Copilot — can make suggestions and explain code, considering what users type and other context from their accounts, like the programming languages they’re using. Beyond that, users can share projects, ask for help, learn from tutorials and use templates.

Generative AI 249

Generative AI Development Google Cloud Software Development 249

Dzone - DevOps

JANUARY 10, 2024

GitHub is a popular development platform that allows developers to collaborate on projects, manage code repositories, and track changes made to files. In this guide, we will outline a few key GitHub features and how to utilize them effectively. Deployments: Use GitHub's deployment features to deploy code to servers or cloud platforms.

Software Review 95

Software Review Guidelines Open Source Project Management 95

InfoWorld

MARCH 20, 2024

GitHub is previewing code scanning autofix, a feature that combines its GitHub Copilot AI assistant with its CodeQL code scanner to provide suggested fixes to discovered vulnerabilities. Code scanning autofix is available in a public beta to GitHub Advanced Security customers.

Development 87

Development Company 87

Xebia

OCTOBER 31, 2023

GitHub Advanced Security for Azure DevOps (GHAzDo) builds on top of the functionality for GitHub Advanced Security and is giving you extra security tools to embed into your developer way of working. It’s a great way to get started with security in your Azure Pipelines and Azure repos and I’ve written about it before in this blogpost.

Azure 162

Azure DevOps Tools Development 162

Coveros

APRIL 25, 2024

This is where GitHub Copilot can be a game-changer. That’s what GitHub Copilot’s test case generation feels like. By analyzing your code, GitHub Copilot can identify different functionalities within the code, like calculating totals or handling user logins.

Software Review 52

Software Review Testing Software Construction 52

Modus Create

SEPTEMBER 11, 2023

With over 100 million developers and 370 million repositories, GitHub is the world’s most popular platform for source code management and a driving force behind today’s open-source revolution. 90% of the Fortune 500 manage their software on GitHub, and that number is only increasing.

Enterprise 110

Enterprise Cloud Open Source Azure 110

Ooda Loop

APRIL 30, 2024

Now, GitHub is giving them even more tools. On Monday, the company launched a technical preview of GitHub Copilot Workspace, an AI-powered developer environment. The release builds on GitHub’s existing productivity tools, including GitHub Copilot, launched […]

Tools 69

Tools Generative AI Software Development 69

InfoWorld

MARCH 6, 2024

GitHub Enterprise Server 3.12, now generally available, introduces tag patterns for restricting deployment rollouts to GitHub Actions environments. Announced March 6 , GitHub Enterprise Server can be downloaded from github.com. The new release also introduces merge queues, a feature that automates pull request merges.

Enterprise 85

Enterprise Development 85

DevOps.com

SEPTEMBER 13, 2023

What methodology (and metrics) should you use to accurately assess the impact on productivity and value delivery of a tool like GitHub Copilot?

Engineering 138

Engineering Metrics Tools Software Development 138

TechCrunch

MAY 9, 2022

Hugging Face released the Transformers library on GitHub and instantly attracted a ton of attention — it currently has 62,000 stars and 14,000 forks on the platform. Essentially, Hugging Face is building the GitHub of machine learning. It’s a community-driven platform with a ton of repositories.

Machine Learning 314

Machine Learning Artificial Inteligence Technical Review Training 314

Xebia

MAY 16, 2023

In this case, we’ll assume that you’re using GitHub as your code repository, but other services like GitLab and Azure DevOps are also supported. Note: To enable the CI trigger, you must connect your dbt Cloud project with either GitHub, GitLab or Azure DevOps. There we can find the API Key value.

Cloud 130

Cloud Azure DevOps Analytics 130

DevOps.com

SEPTEMBER 27, 2023

Checkmarx reported that malicious actors have been able to compromise GitHub's Dependabot, the free automated dependency management tool for software projects.

Report 101

Report Software Tools Culture 101

InfoWorld

APRIL 3, 2024

GitHub Actions , an automated CI/CD platform for GitHub, has been enhanced for enterprise customers, with capabilities including stronger security and GPU-enhanced runners for machine learning. GitHub announced updates to its hosted runner fleet for Actions on April 2. To read this article in full, please click here

Azure 56

Azure Machine Learning Artificial Inteligence Operating System 56

InfoWorld

MARCH 13, 2024

Microsoft has released a second preview of Visual Studio 2022 17.10, featuring GitHub Copilot integrations for generating pull request descriptions and explaining commits. Introduced March 12 , Visual Studio 2022 17.10 Preview 2 can be downloaded from the Visual Studio website.

Analysis 79

Analysis Development 79

InfoWorld

JANUARY 18, 2024

GitHub’s Innovation Graph , a repository containing structured data files of public activity on GitHub, counts more than 20 million US software developers using the platform. GitHub released the GitHub Innovation Graph findings on January 18. US developers uploaded code from GitHub more than 23.7 million times.

Software Development 82

Software Development Software Development Innovation 82

Xebia

JANUARY 18, 2023

When a GitHub Actions workflow needs to read or mutate resources on Google Cloud it must first authenticate to the platform. Traditionally this is used by storing a long-lived JSON service account key in the GitHub repository secrets. Don’t forget to change your project_id and repo in the locals.

Google Cloud 130

Google Cloud Authentication Cloud Resources 130