GitHub Code Quality GA: What to Verify Before Your Next Billing Review
GitHub Code Quality is generally available. Use this practical checklist to verify scope, active committers, usage costs, quality gates, coverage, and preview-to-GA state.
GitHub Actions Self-Hosted Runner Minimum Version Enforcement: July 31 Readiness Checklist
A source-backed inventory, canary, and rollback checklist for GitHub Actions self-hosted runner minimum-version enforcement.
GitHub Actions OIDC Immutable Subject Claims: A Migration Checklist
Review GitHub Actions immutable OIDC subject claims and migrate cloud trust policies without widening deployment access.
pull_request_target Checkout Defaults: A Safe GitHub Actions Migration Checklist
Review the July 16 pull_request_target checkout default change and validate privileged GitHub Actions workflows without confusing checkout with trust.
GitHub Code Quality Pricing: A Pre-GA Rollout Checklist
Estimate GitHub Code Quality cost and run a bounded, reversible rollout before the product's scheduled July 20, 2026 general availability.
GitHub Archived Pull Requests: A Security Evidence Checklist
A reversible security and moderation workflow for GitHub's archived pull requests, including evidence retention, secret handling, and readback checks.
GitHub Secret Scanning Webhook secret_category: Update Alert Routing Safely
A safe rollout workflow for GitHub secret scanning's new secret_category webhook field, from schema-tolerant parsing to queue reconciliation.
Dependabot Default Cooldown: Review Version Updates Without Delaying Security Fixes
A practical workflow for reviewing Dependabot version updates under GitHub's new three-day default cooldown without delaying security updates.
GitHub Secret Scanning Extended Metadata: How to Triage Active Credentials
Use GitHub secret scanning validity and extended metadata to route, contain, rotate, and close credential alerts without spreading secrets.
GitGuardian vs Aikido Security: A Small-Team Evaluation Guide
A practical small-team framework for comparing GitGuardian and Aikido across secret detection, broader AppSec coverage, CI gates, evidence, privacy, and cost.