One of the AI projects that has kept my attention this year is the GitHub Next team’s Agentic Workflows (currently in public preview). I’ve had the privilege to work with members of the team and watch them evolve. This article will discuss how I’ve used Agentic Workflows, how I’ve seen...
Read moreA look at why Dependabot now waits three days before opening non-security version update pull requests, and how that delay can reduce exposure to fast-moving supply chain attacks.
Read on the GitHub BlogOver the past couple of years, I’ve spoken at GitHub Universe, RSAC, BlackHat, and Microsoft Reactor. Preparing for those rooms taught me to be deliberate about how I explain complex ideas.
Read moreA Microsoft Reactor talk on using GitHub Advanced Security to protect dependencies, builds, and deployments across the software supply chain.
Watch on YouTubeA Microsoft Reactor talk on prioritizing Dependabot alerts by risk, context, and team workflow.
Watch on YouTubeHow running Dependabot update jobs on GitHub Actions unlocks self-hosted runners, private registry access, faster runs, and clearer logs.
Read on the GitHub Blog