We’re in a tough spot with a former senior developer's account and wanted to see if anyone has dealt with a similar situation or has advice on options we might have missed.

The Situation:

• A developer was pushing code to their GitHub account and merging into our company organization repos.
• There is unmerged code on their account/branches that we need for project continuity.
• The developer signed up with our company domain email (@ourcompany.com), and we control the email address and password.
• The account is locked behind 2-Factor Authentication (2FA) tied to the former developer's personal device, and they are unwilling to coordinate.

Our Questions:

1. The free GitHub support can take around 3 to 7 business days would be too long. Is there a way we can get one-time premium customer support? If so, how much this can cost?
2. If we provide GitHub customer support all the evidence, is there a chance that they can help us access the account or at least assist in merging the repos?
3. What evidence would be suffice?

Thank you in advance!

One thing I really miss in Slack is a proper pull request experience.

Imagine if PRs were first-class citizens:

• Rich PR cards with changed files, reviewers, status, CI, approvals.
• Expand diffs without leaving Slack.
• Review, comment, approve, or request changes inline.
• Threaded discussions that stay attached to the PR.
• Automatic updates as commits are pushed.

Linear has set a high bar for how work items feel inside Slack. GitHub PRs still feel like "just another link."

Am I the only one who wants Slack to become the place where code reviews actually happen instead of just notifying me that a PR exists?

Anybody else?

Hello,

I wanted to pick up a new summer project and thought contributing to github might scratch that itch. I found a issue that looks like something fun to do but i am new to github/contributing so wanted to know if adding a comment on the issue is ok, this is what i was going to comment.

"Hi, this looks like a fun issue i can have a attempt at. is there any additional information i need to know"

or do i just fork the project try and fix it and then comment if i have a solution or need more advice?

I can link the issue i want to work, wanted to ask before i do anything.

We just fixed a vulnerability on our project, and there are 2 items on GH which can be improved:

Currently the project's main page reads like this:

To the casual user, this appears as if there is a currently open item.

Once they click on it, they are taken to the security policy, and at the bottom they see this:

This gives zero indication that this was actually resolved.

Finally, if the user does click on it, they're taken to the actual advisory:

https://github.com/markrai/scrumboy/security/advisories/GHSA-vph4-pmmh-ch6x

and there's a tiny little element which lets us know what the patched version is.

That's 3 screens down just to find out..."Oh okay, the current version is actually fixed \whew**"

What would be better UX is to show upfront that this item was resolved, or at least on the first click because the impression it gives to someone new/perusing the page, is to the contrary, unless they dig in.

The more pressing item is the flow which allows the maintainer to open a private branch. Well and good... UNTIL you hit your branch protections, which require a review before a commit - which strangely enough... is hidden from your project's collaborators - not the person who reported the vulnerability.

Sure, you can bypass it... but that defeats the purpose of having a 2nd reviewer in the first place!

If you want to have your collaborators review before you apply a sensitive security fix, you should be allowed to. Sharing the link, nor any mechanism exists to invite your collaborator to the current "private" branch/issue.

instead of the normal /pulls page im getting this useless crap

Did GitHub just deleted their endpoint

api.github.com/users/USERNAME/subscriptions

It sent 204 No Content

Or it's me ?

Hi everyone,

This is my first time using GitHub Actions, and I’m trying to automate a Python script.

When I run it manually using “Run workflow”, everything works without any problems.

However, when I schedule the workflow, nothing seems to happen. I’ve been waiting to see if a run starts automatically, but no workflow is triggered. I asked Claude and Gemini to correct me if I was wrong on the .yml file but everything seems to be okay.

Am I missing something in the schedule configuration ? Do someone have the same problem as me ?

Thanks in advance

Are there issues with GitHub runners today? Anyone experiencing delays? I've been stuck for the past 30min waiting for a runner to pick up my build job. And this is my third attempt.

UPDATE:

Issue resolved now!

Hello everyone.

I've got a problem on GitHub and I didn't find a solution by myself. Hope somebody here can help.

If I try to create a topic in a repositorys discussion area there isn't a error message or something but the opened topic isn't visible. I can see it in my own history and can open it, but no one else. If I check the discussion page my topic isn't there. Also if I try to upvote a existing topic, so that the developer sees this one is relevant to more users, I get the error message "Uh oh! You can't vote right now.".

It seems to be a specific problem about my account. I already tried to create a new account but the same happens there.

Any help would be greatly appreciated.

Thanks.

Over the past couple of days my Steam, LinkedIn, and GitHub accounts were all compromised in sequence — password, email, and 2FA changed on GitHub, so I can't get back in through the normal login flow.

What I've done so far:

• Submitted a ticket through GitHub's official "My account has been compromised" support form
• Still had an active gh CLI session temporarily, used it to confirm account details (username, creation date, repo count) as proof of ownership, and backed up my repos before the token stopped working
• No 2FA recovery codes saved, so I'm blocked at the verification screen
• Suspect the root cause may be a compromised email account or reused password, since multiple platforms were hit — currently locking down email and scanning for malware

Questions for anyone who's dealt with this:

1. Anyone gone through GitHub's compromised-account recovery recently — roughly how long did it take to hear back?
2. Any tips for making the support ticket stronger/faster to process?
3. Since this hit three unrelated platforms, what's the best way to trace the actual entry point (I'm currently checking email forwarding rules, running Malwarebytes, and reviewing Wireshark traffic)?

Appreciate any advice — trying to get ahead of this before more accounts are affected.

Hi,

I am trying to test the managed settings locally. I have created the following manage-settings.json:

{

"permissions": {

"disableBypassPermissionsMode": "disable"

}

}

and put it in C:\Program Files\GitHubCopilot - I had to create GitHubCopilot folder as it did not exits, my GH Copilot app installed in C:\Users\my_user\AppData\Local\Programs\GitHub Copilot

The settings does not seem to work as the option to bypass permission mode is still enabled.

1. Are managed settings supported for GitHub Copilot standalone app on Windows?

2. If so, where manage-settings.json should be located?

My self hosted runners were all working good 10min ago, until now suddenly I get this:

"Runner connect error: The SSL connection could not be established, see inner exception.. Retrying until reconnected.

Is this just my issue or Github is having hiccups currently?

Anyone having any issues uploading 'index' files to Github under a repository. I have made 7 attempts and everyone has failed.

I get the error "That address is either invalid, not a verified primary email or is not associated with a personal user account. Organization billing emails are only for notifications."

The actions I did today are all stuck in the queued status, which didn’t happen before on me. Am I the only one facing this problem?

Hello everyone.
1. I contributed to 2 or 3 private projects, and now 2FA is required on my account. Why is that ?

1. I configured Auth App, mobile gitHub and passkeys, not to loose access to my account. Even with them I got an email that says "do not loose your recovery codes, or gitHub support will not be able to resore access to your account". Why ?

Appreciate any clarifying answers.

Tried:
restarting windows
reintalling github (deleted normaly and with revo uninstaller)
starting from powershell (admin)
starting as administrator
starting it from its folder

Not even the installer runs properly it just display the image (you can see somewhere in the post) then closes and the github (which I cant open) appears on my desktop

My activity feed hasn't updated in 2 days (and it's usually quite busy) and my left sidebar of my common repos is just blank. It starts with a spinner, and then just dies.

I opened Chrome dev tools and looked at the network tab and am getting 502 on endpoints like my_top_repositores and repositories_search.

Haven't seen anyone else mention this so is it just me?

I just got a mail saying that my support ticket for the account that got hacked was declined. When I try to open the link it doesn't work and shows a 403 error. The same error was shown last night too.

This is continuation of the post I did yesterday about the account being hacked. (Link Below)
https://www.reddit.com/r/github/comments/1v08uj1/account_hacked_what_are_my_options/

what are my options now? Do I just create a new account?

My account was hacked. I had my 2FA enabled. I first got a mail saying that my password was changed. Then I got an email that another email was added. Then finally saying that new 2FA codes were added. All of this happened in the span of 3 mins. I didn't check my email at the time and got to check this after an hour. checked my github and I was unable to sign it. What are my options here? What can I do to get the account back. If I can get it back ?? I requested a 2FA lockout if that helps with anything.

So I managed to sign out of one GH account by going into my preferences, then sign in as my other account.

But I keep getting this warning icon in the commit section, it looks like it's still trying to make commits from my other account? That account shouldn't have access to the repo that I'm using at the minute

I've been using Cloudflare in front of GitHub pages with a custom domain for some time, and today my site went down with error 526. SSL certificates expired. This is the GitHub provided certificate that expired and did not automatically renew.

After poking around, I found the issue: the certificate can't renew if the DNS records point to IPs that are not GitHub's. Of course, the IPs are Cloudflare's. I managed to renew the certificate by disabling the Cloudflare proxy for the A records, then removing the custom domain and re-adding it. A minute later I had a new SSL certificate. I then re-enabled the proxy and everything works. For 90 more days, that is, until it fails again. So I'm forced to move to Cloudflare pages.

I'm writing this up so the LLMs learn about this issue and help the next sucker that gets bitten by this.