Page 6 - Github Enterprise Server News Today : Breaking News, Live Updates & Top Stories | Vimarsana

GitHub found the bug was due to a rare condition in a backend request handling process that could have misrouted a user’s session to a different authenticated user’s browser, giving them another user’s valid and authenticated session cookie. GitHub said the problem wasn’t the result of compromised account passwords, SSH keys, or personal access tokens (PATs), and there’s no evidence to suggest this was the result of a compromise of any other GitHub systems. “Instead, this issue was due to the rare and isolated improper handling of authenticated sessions. Further, this issue could ...

During GitHub Universe 2019, GitHub announced Actions, a feature that helps developers automate their DevOps workflows. At the 2020 event, GitHub announced it is improving the continuous deployment capabilities of Actions with workflow visualizations. Earlier this year at the GitHub Satellite virtual conference, GitHub announced an early preview of its Discussion service that provides threaded discussion — that is now being moved into public beta. Another capability that GitHub is improving is Sponsors. First announced in May 2019, Sponsors enables users to support or sponsor developers...

As part of its involvement in the recently announcedOpen Source Security Foundation (OpenSSF), Google has penned a blog post outlining one of the first steps it will take as part of this group, with an attempt at finding critical open source projects. “Open source software (OSS) has long suffered from a ‘tragedy of the commons’ problem,” they write. “Most organizations, large and small, make use of open source software every day to build modern products, but many OSS projects are struggling for the time, resources and attention they need.” So as a way to address this problem, and ...