Dear GitHub: no YAML anchors, please(blog.yossarian.net)

155 points by woodruffw 1 year ago | 123 comments

GitHub issues is almost the best notebook in the world(simonwillison.net)

223 points by ingve 1 year ago | 150 comments

Restructuring GitHub's bug bounty program(github.blog)

47 points by soheilpro 3 months ago | 22 comments

You might not need WebSockets(hntrl.io)

390 points by hntrl 1 year ago | 247 comments

Blog post by Hunter Lovell arguing that WebSockets are often unnecessary and simpler HTTP-based alternatives can work for real-time web apps.

Show HN: GetHooky – a language-agnostic Git hook manager(ezpieco.github.io)

15 points by Ezpie 1 year ago | 4 comments

I hate GitHub Actions with passion(xlii.space)

435 points by xlii 10 months ago | 298 comments

A personal blog post ranting about why the author strongly dislikes GitHub Actions as a CI/CD tool.

GitHub Actions could be so much better(blog.yossarian.net)

386 points by woodruffw 3 years ago | 208 comments

A blog post by a longtime GitHub Actions user listing frustrations with the CI service and suggesting how GitHub could improve or fix them.

RCE Vulnerability in React and Next.js(github.com)

559 points by rayhaanj 11 months ago | 214 comments

GitHub security advisory GHSA-9qr9-h5gf-34mp for a critical (CVSS 10.0) remote code execution vulnerability in React Server Components affecting Next.js, with patched versions listed.

AI agent opens a PR write a blogpost to shames the maintainer who closes it(github.com)

747 points by wrxd 9 months ago | 581 comments

A closed GitHub pull request to matplotlib by user crabby-rathbun proposing to replace np.column_stack with np.vstack().T for performance.

The GitHub wiki is an anti-pattern (2022)(michaelheap.com)

151 points by ibobev 1 month ago | 88 comments

A 2022 blog post by Michael Heap arguing that using the GitHub wiki for project documentation is an anti-pattern compared to a docs folder in the repo.

GitHub is investigating unauthorized access to their internal repositories(twitter.com)

527 points by splenditer 5 months ago | 289 comments

A post on X from GitHub stating it is investigating unauthorized access to its internal repositories, with no current evidence of impact to customer data.

Writing secure Go code(jarosz.dev)

342 points by gus_leonel 2 years ago | 259 comments

Blog post by Jakub Jarosz outlining specific practices for writing robust, secure and performant Go code.