Updated 3 minutes ago
Related News
Oct 16, 2026
GitHub’s license compliance can now block dependency merges — start in Evaluate mode
GitHub’s enterprise license controls are generally available. Active rulesets can block pull requests, while Evaluate mode lets teams measure policy impact before enforcement.
GitHubopen source licensessupply chain security
Oct 14, 2026
GitHub now blocks Anthropic API keys at push by default
GitHub Secret Scanning added Anthropic service and user API-key patterns, with push protection enabled by default. The same release adds Cloudsmith detection and makes Salesforce a secret-scanning partner.
GitHubAnthropicsecret scanning
Oct 13, 2026
GitHub makes withdrawn Dependabot alerts distinguishable from missing ones
Dependabot now emits a withdrawn webhook action before removing an invalid alert, while REST reads and updates return 410 Gone. Security integrations can preserve the withdrawal event without misclassifying it as an unknown alert.
GitHubDependabotsupply chain security