Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Kevin Alwell
Introducing Artifact Attestations-now in public beta
There’s an increasing need across enterprises and the open source ecosystem to have a verifiable way to link software artifacts back to their source code and build instructions. And with more than 100M developers building on GitHub, we want to ensure developers have the tools needed to help protect the integrity of their software supply chain.
Octoverse: The state of open source and rise of AI in 2023
What does it mean for a new technology to go mainstream? First released in 2005, Git was still a new open source version control system when we founded GitHub. Today, Git is a foundational element of the modern developer experience—93% of developers use it to build and deploy software everywhere1. In 2023, GitHub data highlighted how another technology has quickly begun to reshape the developer experience: AI.
Ensuring compliance in developer workflows
We recently walked through practical ways that you can start meeting compliance requirements without having to transform the culture in your company—all while enabling developers to stay in the flow. In this post, we focus on ensuring systemic compliance with regulatory frameworks without encumbering the developer experience and how GitHub Enterprise serves as the secure operating platform.
Default setup: A new way to enable GitHub code scanning
At Github, we want to make it easy to develop secure software. This means building security tools that provide a frictionless experience for developers and that begins with enablement. To that end, we already offer the enablement of secret scanning and Dependabot in just one click. Today we’re extending these capabilities with a new setup option for code scanning, “default setup,” a way for you to automatically enable code scanning on your repository.
Release Radar · November 2022 Edition
We promised we’d be back soon and here we are! There has been an incredible amount of open source projects shipping major version releases before the year wraps up. I can’t believe we are all saying that now. “When the year wraps up!” or “See you next year!” What happened to 2022? Well, we know the open source community was working hard all through this past year. If you don’t know what I’m talking about, check out the State of the Octoverse report.
Octoverse 2022: 10 years of tracking open source
What to know: We recently published our 2022 Octoverse report where we explore the impact open source software is having on developers and companies. 10 years ago, we released our first Octoverse report to celebrate the developers on GitHub and explore the state of open source. It was a radically different world. In 2012, there were 2.8 million developers on GitHub and companies were mainly using open source to power their web servers.
View GitHub code scanning findings directly in VS Code and GitHub Codespaces
A seamless developer experience is critical if you want to fix security issues fast. Developers need access to security alerts and remediation information as they develop. GitHub code scanning displays results natively in the pull request—exactly when developers are looking for code review. But it also goes further: by exposing those results as SARIF, code scanning makes it easy to integrate them into any IDE.
Best practices on rolling out code scanning at enterprise scale
As a Solutions Engineer at GitHub, I partner with our Enterprise customers to ensure they get the most out of GitHub. That often comes in the form of best practices discussions, tool optimizations or process improvements. Something every organization wants to get right is the initial rollout of a new tool or service, which can be particularly important when scaling an application security program. As software development has evolved, so too have the expectations for application security processes.
Transform your software engineering practices with GitHub Enterprise
Now more than ever, teams should be quickly evolving to keep up with the ever-changing landscape of software development. Think about it: how else can company leaders maintain a competitive edge within their industries? Take the banking industry, for example. In a matter of years, we’ve gone from in-person transactions, to ATMs, to online, to mobile. Now, people can deposit and withdraw money in seconds.
Release Radar · July 2022 Edition
While some of us have been wrapping up the financial year, and enjoying vacation time, others have been hard at work shipping open source projects and releases. These projects include everything from world-changing technology to developer tooling, and weekend hobbies. Here are some of the open source projects that released major version updates this July. Check out these projects, and maybe even think about using or contributing to them.
Today’s most common security vulnerabilities explained
Did you know that according to a new Secure Code Warrior survey, a surprising 86% of developers do not view application security as a top priority? This is concerning since 85% of codebases contain known open source vulnerabilities. We’d like to change that. The vision of the GitHub Security Lab is to find vulnerabilities, amplify research, educate, and enable the community to secure the open source software we all depend on.
5 simple things every developer can do to ship more secure code
Here’s a confession: As a developer, I don’t always prioritize security when I’m building new code. It’s not that I don’t care about security. At this point, no one needs a primer on why security matters. But actually making sure your code is secure can be a challenge—and writing new code is usually more fun than building tests or checking if your dependencies are up to date.
Octoverse Spotlight 2021: The Good Day Project—Personal analytics to make your work days better | The GitHub Blog
Developers’ days can be classified two ways: Flowing and Disrupted Using the SPACE productivity framework, we were able to classify the types of days a developer typically has. The data shows developer days can often be classified into one of two ways: Flowing and Disrupted Days. The classifications were based on questions we asked developers about their day, and included things like stress, breaks, meetings, interruptions, if they worked with or helped others, and how much work they got done.
Using GitHub code scanning and CodeQL to detect traces of Solorigate and other backdoors
Last month, a member of the CodeQL security community contributed multiple CodeQL queries for C# codebases that can help organizations assess whether they are affected by the SolarWinds nation-state attack on various parts of critical network infrastructure around the world. This attack is also referred to as Solorigate (by Microsoft), or Sunburst (by FireEye).
GitHub Action Hero: Shohei Ueda
With GitHub Actions, you’re able to automate more of your workflow by connecting the tools you know and love—giving you more freedom to spend time innovating. You can deploy to any cloud, build containers, automate a message that welcomes new users to your open source projects, and so much more. Over the next few weeks, we’re sharing stories from the earliest GitHub Actions adopters to help inspire you.
Survey results: Better computer science learning through hackathons
The most important thing you can teach your students is how to learn more on their own. Your students start the semester at varying technical levels, and computer science concepts can be difficult to grasp. You won’t be able to fit everything you’d like to teach in the short time you have with them. With this in mind, you need a way to boost learning and take your classroom from studying syntax to solving real problems with code. That’s where hackathons can help.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Kevin
Contact Kevin, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack