GitHub’s Bug Bounty Program is evolving to prioritize high-quality, high-impact research. Learn about our next chapter: new VIP program, restructured public bounties, and updated signal requirements, all designed to build stronger researcher partnerships.

GitHub had 14,000+ internal repositories, but fewer than half had a clear owner. In under 45 days, we validated ownership for every active repo and archived 8,000 that were no longer used. Here’s how we made ownership durable, and how you can too. 💡

GitHub has reportedly been hacked. A group called TeamPCP claims it gained unauthorized access to GitHub’s internal systems and stole data from around 4,000 private and internal repositories, including source code and company files. They are now trying to sell this stolen data for more than $50,000 on underground forums and have said they will release it for free if no one buys it. GitHub is investigating the unauthorized access and says it has found no evidence so far that customer data, organizations, or customer repositories were affected.

179k GitHub stars. An ex-Vercel engineer just open-sourced the exact AI coding workflow he uses every day. Not prompts. Not templates. A complete .claude setup with 26 production-ready skills you can clone for free. Here's what stood out: • grill-with-docs → Interviews you before writing the implementation plan • code-review → Reviews architecture, not just syntax • diagnosing-bugs → Runs a systematic debugging workflow instead of random guessing • research → Investigates primary sources before making changes • grill-me → Challenges your thinking until the plan has no weak spots • handoff → Compresses an entire coding session into a clean handoff for the next agent • writing-great-skills → Helps you create reusable AI skills that actually work The best part? These aren't tied to Claude. The workflows can be adapted to Cursor, Codex, Gemini CLI, OpenAI, Amp, Windsurf, or practically any coding agent. If you're building with AI in 2026, the advantage isn't having a smarter model. It's having better workflows. This repo is basically a free masterclass in how senior engineers collaborate with AI. Worth studying even if you never copy a single file. 🔖 Bookmark this before it disappears from your timeline. What's your favorite AI coding agent right now?

If GitHub gives up its preeminent place, I would prefer to see a federated system where one identity was shared across a distributed forge network rather than having to have logins on 50 different forges, having to check notifications on all of them, having no integration between them, etc.