GitHub Articles
Tools and techniques for effective code documentation
Get a comprehensive overview of code documentation and learn why it’s essential for delivering quality software. Gain valuable insights into best practices, strategies, and tools for well-documented code, including how AI helps developers write code documentation more efficiently.
An introduction to innersource
Organizations worldwide are incorporating open source methodologies into the way they build and ship their own software.
What is the DevOps Model? Exploring foundational practices in DevOps
DevOps helps teams ship high-quality products faster by reducing the friction between writing, testing, and deploying code. GitHub offers a holistic platform designed to help organizations successfully adopt DevOps, making it easier to continuously ship and improve software.
Application security posture management (ASPM)
Protecting against digital threats is as crucial as protecting physical assets. Just like a guard vigilantly protects a building from intruders, ASPM helps protect applications from digital threats, safeguarding them against cyber threats throughout their lifecycle.
AI in Software Development
Learn how AI supports every stage of software development and why it’s a powerful coding partner for developers.
AI Code Reviews
Code quality and security are paramount in software development, which is why code reviews are such an important step in the development lifecycle. This step can be be time-consuming and tedious—until now.
What is runtime application self-protection (RASP)?
Learn how runtime application self-protection (RASP) safeguards software applications against runtime attacks. Explore the features and benefits of RASP and how it complements other solutions to enhance application security.
Mobile application security
Mobile application security safeguards against threats like reverse engineering attacks, tampering, malware, and data theft. Security breaches risk financial loss and damage to brand credibility. To get the most out of mobile application security, it’s important to understand how it works and how to implement best practices.
What is fuzzing and fuzz testing?
Learn how to detect software flaws and security vulnerabilities with fuzzing. Explore fuzz testing techniques, strategies, and best practices you can apply to your software development lifecycle.
Dynamic application security testing (DAST)
Dynamic application security testing (DAST) is a method of testing the security of an application while it’s running. DAST tools test web applications during their operating states to find security vulnerabilities using simulated attacks, such as SQL injection, cross-site scripting, and insecure server configuration. This application security (AppSec) testing type mimics a malicious hacker to find security issues in the running application, so developers can fix them before the application is deployed to the public.
What is Cross-Site Scripting (XSS)
Cross-site scripting (XSS) is a persistent threat to web security. Understanding its types, mechanics, and impact is key to adopting effective prevention strategies.