GitHub Actions stories

Orca Security warns that AI credentials, vulnerable dependencies and lax pipeline controls are leaving production environments exposed across US and Europe.

AppOmni upgrades Heisenberg to help teams trace GitHub Actions and spot tainted dependencies after the LiteLLM supply chain breach.

NetRise unveils Provenance, a tool to trace open source maintainers and stop risky dependencies before they spread through software.

Aqua Security's Trivy GitHub Action was hijacked to ship infostealer code via CI/CD pipelines, exposing secrets across downstream users.

1Password unveils Unified Access to secure AI agents and machine credentials, promising endpoint-to-agent visibility for security teams.

GitHub joins tech giants in a USD $12.5 million Alpha-Omega push, boosting AI-powered defences for critical open source software.

JFrog warns 13 GitHub CI/CD workflow flaws, mostly critical, could let attackers hijack pipelines and steal secrets at scale.

Datadog warns 87% of organisations run software with exploitable flaws as ageing code, fast releases and automation amplify DevSecOps risk.

GitHub debuts Agentic Workflows, using AI agents with strict guardrails to automate repo chores while keeping maintainers in control.

GitHub will cut Actions hosted runner prices by up to 39% from 2026 while adding a new USD $0.002-a-minute fee for self-hosted use.

Keeper Security named Overall Leader in non-human identity management, praised for securing machine identities across cloud-native and hybrid environments.

AppOmni has launched Heisenberg, an open source tool that detects and prevents risky software dependencies by inspecting changes in real time at pull requests.

GitHub launches Agents panel, enabling paid Copilot users to manage AI coding tasks across platforms like GitHub.com, VS Code, and JetBrains IDEs.

GitHub Copilot has surpassed 20 million users, with over 90% of the Fortune 100 adopting the AI tool, as demand for AI coding aids surges globally.

BeyondTrust named Overall Leader in the 2025 KuppingerCole Leadership Compass for Enterprise Secrets Management, praised for secure, scalable secrets solutions.

Google upgrades Gemini 2.5 AI on Vertex AI, boosting reasoning, security, and efficiency for enterprises with features like Deep Think and thought summaries.

GitHub has launched its Copilot asynchronous coding agent, integrated with VS Code, to speed up and secure software development for enterprise users.

GitHub has surpassed 150 million developers and launched a free tier for its Copilot in Visual Studio Code, empowering users with enhanced coding tools.

LambdaTest unveils KaneAI, the first end-to-end AI test agent, making test automation more accessible with GenAI-powered natural language prompts and robust debugging.

GitHub launches GitHub Models, letting over 100 million developers integrate top AI models from Meta, OpenAI, Cohere, and more within their workflows.