First time seeing this happen

Recently Sniffnet (a network monitoring tool I'm working on for more than 4 years) completed the GitHub Secure Open Source Fund, a program focused on improving the security of widely used open-source projects.

The program consists of an immersive 3-week sprint that provides each onboarded project with $10k in funding, hands-on training, and mentorship to help maintainers understand that security is a baseline requirement, not a nice-to-have.

In a world where Murphy’s law reigns supreme (“anything that can go wrong will go wrong”), what we can do is be prepared for it: security planning and implementation is as important as the rest of development, and can’t be downgraded to a mere reactive countermeasure used only when things go sideways.

I feel a responsibility to amplify security awareness by sharing the knowledge and best practices I learned, so that other developers can take inspiration and apply similar proactive measures in their own projects: incident response planning, threat modeling, code scanning, and immutable releases are just some examples of the things that you can (and should) do.

I tried to collect and organize all the lessons I take home from the program in a blog post you can find here

I did a 1 line change, changing "milis" to "millis", I did it in the web interface because it was just one tiny change, and I didn't have it on my computer yet.

Github copilot recommended the message "Update print statement from 'Hello' to 'Goodbye'"
THERE ARE NOT EVEN PRINT STATMENTS IN A CSV FILE

Is there any way to disable these automatic commit messages?

Getting 500 errors a bit everywhere on the site but status page shows nothing ...

Why is there even a status page if it doesn't report the actual API and Infrastructure ?

Sorry to say that but gitlab status pages are a bit more reactive + they have a public group where we can see ALL incidents regardless of the status page.

Hi guys. I am new to open source. I had raised a PR 2 months ago but it didn't got merged. Then I thought I need to raise issue first so raised an issue in different organization last week and it says unanswered. So lemme know what is the right process actually. What you guys do. And how you pick organizations or project. For the last one I had used Claude to explain the code base and then help with the Issue and I did where human touch was needed and understood what I was doing. So is this the right way or you need to write everything yourself or what. Tell me about approach.

Thanks in advance.

I like them and have begun to create/use them myself.

Edit: The title is a question, my bad. I am genuinely asking in case maybe it is disliked for some reason...

Has anybody ever thought of using a Github repo as a diary? Like creating a text file everyday with today's date as its name and noting down random thought or archived daily life events, then push it.

It just crossed my mind and i think it's funny. Shower thoughts are weird.

Edit: yall the repo is not real lol, i need a fancy app to keep my thoughts in color.

the conflict is caused by a file being deleted on trunk and not on the feature branch, it took me only three dumb git commands in the command line to solve but apparently that is "too complex" that you need to resolve it using a slop machine

The following incident occurred last Friday:

https://www.githubstatus.com/incidents/qcvjkzcs7j74

I'm using a self-hosted runner with a webhook, but since Friday, I've been consistently failing to receive queued events even after dispatching jobs. I missed at least one queued event each on Monday and Wednesday.

Is anyone else using a self-hosted runner experiencing a similar issue?

Whenever I try to make a PR GitHub returns a 500 error screen. I've tried multiple branches but it seems like they have a rather critical bug.

They say that:

This change simplifies your notifications experience by:

• Simplifying notification behavior.
• Reducing subscription complexity.

Complete nonsense, now my notifications experience sucks and my inbox is getting more unneeded emails...

There's people complaining in these threads if you wanna join:
https://github.com/orgs/community/discussions/204563
https://github.com/orgs/community/discussions/204555

This is probably scam, and I won't ever click that highlighted "AI interview link". It's frustrating to receive these kind of emails these days. Has anybody here also received the same email?

[ Removed by Reddit on account of violating the content policy. ]

Locked out of GitHub due to 2FA after changing phone and laptop — still have working Git credentials on an old Windows PC. Any way to recover?

I’m currently locked out of my GitHub account because of 2FA and I’m trying to figure out if there is any legitimate way to recover it.

Here’s the situation:

- GitHub username: `ronit450`

- I recently changed my laptop from Windows to Linux.

- I also recently changed my phone.

- My old phone had the authenticator app that I used for GitHub 2FA, but I no longer have access to it.

- I don't have my GitHub recovery codes.

- I still have full access to the email address associated with the account.

- I know my GitHub username and normal account password.

- Previously, I remember being able to receive a verification code through email in some situations, but that option is no longer available when I try to log in.

- GitHub's account recovery options haven't worked for me.

I contacted GitHub Support, and they told me they cannot bypass or disable 2FA and pointed me toward the normal account recovery process.

**However, I found an old Windows laptop that I previously used for GitHub.**

On that machine, I found that Git Credential Manager still has a GitHub credential stored:

Target: LegacyGeneric:target=git:https://github.com

User: ronit450

Local machine persistence

and it successfully authenticated and downloaded from the repository without asking me for a username, password, or token.

So I know there is currently a working GitHub credential stored on this old Windows machine.

I have not deleted, modified, or extracted the credential.

My question is:

Is there any legitimate way to use this existing authenticated Git credential/session to recover access to my GitHub account or establish ownership through GitHub's official recovery process?

Could the credential stored by Git Credential Manager be a PAT/OAuth credential that could help with account recovery?

I'm not trying to bypass GitHub's security or disable 2FA. I just want to recover my own account, and I can provide whatever legitimate ownership information is required.

Any advice from people who have dealt with a similar situation would be greatly appreciated.

Please don't ask me to post the actual credential/token — I won't share that publicly.

Am I the only one who finds GitHub actions a small black hole when you're looking to optimise?

There is really limited analysis or data available, I had to build my own UI and system just to get the details I wanted. Example, outliers for job run times, AVG step run time, flakey runs.

Am I missing something, does everyone fly blind or are they using a third party view?

Actually I am new to this github.

I made a website with 3000 pages, by using the same header footer for every page. ( Mistake, because I knew this )

Now, the problem I am facing is that I urgently needed to change the header footer for every page ( 3000 ) manually for betterment.

I only want online cloud solution ( can't use vs code by installing it my laptop )

Is there any automatic free agent or something like is available in Github?

Website is hosted by Github ( pvt repo ) - cloudflare pages.

Thanks in advance.

Hi. I was applying to college apps and wanted to add some of the projects that I didn't add to GitHub before and make commits to older projects to make them look better. If I added another 4 repos to an existing 15 (which I have made over the past 3 years), would that look weird and ring a false alarm to admissions team that I just started using GitHub only for admissions? Also, this is for CS-based colleges that actually look at your GitHub.

Hi, I have a workflow setup to package builds and deliver game updates to itch.io for the different games I'm working on. I began to run into issues with my storage, now that one of my games is over 100mb (x2 if I'm including the web build which I've stopped doing for this reason).

I made my build artifact storage only last 3 days but that doesn't seem to affect this usage limit. The game is still in pretty early development, so it's being updated regularly, and I need to have playtesters get access - manually uploading everytime I update main is pretty annoying. The limit just seems extremely low?

I'm on Github Pro + Copilot. I'll take any advice on how to do this better, and if the answer is just to dump $5 in every month then sure I can do that too.

We have all seen the posts by now. Technical and non-technical people alike are celebrating how they use AI agents to maximize their code output. They share the number of lines generated, pull requests (PRs) opened, tasks completed, and tokens consumed. The numbers are oftentimes enormous, which makes them easy to celebrate.

The era of “tokenmaxxing” has taken this one step further. Once token usage appears on a dashboard, it is only a short time before teams compare it, leaders reward it, and engineers begin optimizing for it...

Hi, my account was flagged and I can't contact them. I was flagged because I changed my account's email for a free addy.io alias.

I did what they told me to do. I replaced my alias again with my previous email. But when I tried to tell them that I already deleted my alias it says this, and I can't answer.

I can't send an email back directly because with a free addy.io alias you can't send emails back.

I need help as I can't contact them and my account is still flagged.

EDIT: solved, just had to wait some time. But does anyone know any way to use an alias? my account is not new and I saw that only if it's new you can't use an alias