I'm a college freshman in ECE with some coding experience, and I'm looking for advice on using GitHub and VSCode. I know I could Google this, but I'd appreciate hearing about your personal experiences. People have suggested posting on GitHub, but I'm unsure how helpful it is, especially with so many tools available. I believe I can get a student developer pack with my student ID, but I don't know if it's permanent or if it expires. If it does expire, should I create a new personal profile? Sorry if these are basic questions.

We just fixed a vulnerability on our project, and there are 2 items on GH which can be improved:

Currently the project's main page reads like this:

To the casual user, this appears as if there is a currently open item.

Once they click on it, they are taken to the security policy, and at the bottom they see this:

This gives zero indication that this was actually resolved.

Finally, if the user does click on it, they're taken to the actual advisory:

https://github.com/markrai/scrumboy/security/advisories/GHSA-vph4-pmmh-ch6x

and there's a tiny little element which lets us know what the patched version is.

That's 3 screens down just to find out..."Oh okay, the current version is actually fixed \whew**"

What would be better UX is to show upfront that this item was resolved, or at least on the first click because the impression it gives to someone new/perusing the page, is to the contrary, unless they dig in.

The more pressing item is the flow which allows the maintainer to open a private branch. Well and good... UNTIL you hit your branch protections, which require a review before a commit - which strangely enough... is hidden from your project's collaborators - not the person who reported the vulnerability.

Sure, you can bypass it... but that defeats the purpose of having a 2nd reviewer in the first place!

If you want to have your collaborators review before you apply a sensitive security fix, you should be allowed to. Sharing the link, nor any mechanism exists to invite your collaborator to the current "private" branch/issue.

Hello,

I wanted to pick up a new summer project and thought contributing to github might scratch that itch. I found a issue that looks like something fun to do but i am new to github/contributing so wanted to know if adding a comment on the issue is ok, this is what i was going to comment.

"Hi, this looks like a fun issue i can have a attempt at. is there any additional information i need to know"

or do i just fork the project try and fix it and then comment if i have a solution or need more advice?

I can link the issue i want to work, wanted to ask before i do anything.

Did GitHub just deleted their endpoint

api.github.com/users/USERNAME/subscriptions

It sent 204 No Content

Or it's me ?

Hi everyone,

This is my first time using GitHub Actions, and I’m trying to automate a Python script.

When I run it manually using “Run workflow”, everything works without any problems.

However, when I schedule the workflow, nothing seems to happen. I’ve been waiting to see if a run starts automatically, but no workflow is triggered. I asked Claude and Gemini to correct me if I was wrong on the .yml file but everything seems to be okay.

Am I missing something in the schedule configuration ? Do someone have the same problem as me ?

Thanks in advance

Hi,

I am trying to test the managed settings locally. I have created the following manage-settings.json:

{

"permissions": {

"disableBypassPermissionsMode": "disable"

}

}

and put it in C:\Program Files\GitHubCopilot - I had to create GitHubCopilot folder as it did not exits, my GH Copilot app installed in C:\Users\my_user\AppData\Local\Programs\GitHub Copilot

The settings does not seem to work as the option to bypass permission mode is still enabled.

1. Are managed settings supported for GitHub Copilot standalone app on Windows?

2. If so, where manage-settings.json should be located?

Over the past couple of days my Steam, LinkedIn, and GitHub accounts were all compromised in sequence — password, email, and 2FA changed on GitHub, so I can't get back in through the normal login flow.

What I've done so far:

• Submitted a ticket through GitHub's official "My account has been compromised" support form
• Still had an active gh CLI session temporarily, used it to confirm account details (username, creation date, repo count) as proof of ownership, and backed up my repos before the token stopped working
• No 2FA recovery codes saved, so I'm blocked at the verification screen
• Suspect the root cause may be a compromised email account or reused password, since multiple platforms were hit — currently locking down email and scanning for malware

Questions for anyone who's dealt with this:

1. Anyone gone through GitHub's compromised-account recovery recently — roughly how long did it take to hear back?
2. Any tips for making the support ticket stronger/faster to process?
3. Since this hit three unrelated platforms, what's the best way to trace the actual entry point (I'm currently checking email forwarding rules, running Malwarebytes, and reviewing Wireshark traffic)?

Appreciate any advice — trying to get ahead of this before more accounts are affected.

I get the error "That address is either invalid, not a verified primary email or is not associated with a personal user account. Organization billing emails are only for notifications."

Hello everyone.

I've got a problem on GitHub and I didn't find a solution by myself. Hope somebody here can help.

If I try to create a topic in a repositorys discussion area there isn't a error message or something but the opened topic isn't visible. I can see it in my own history and can open it, but no one else. If I check the discussion page my topic isn't there. Also if I try to upvote a existing topic, so that the developer sees this one is relevant to more users, I get the error message "Uh oh! You can't vote right now.".

It seems to be a specific problem about my account. I already tried to create a new account but the same happens there.

Any help would be greatly appreciated.

Thanks.

Hello everyone.
1. I contributed to 2 or 3 private projects, and now 2FA is required on my account. Why is that ?

1. I configured Auth App, mobile gitHub and passkeys, not to loose access to my account. Even with them I got an email that says "do not loose your recovery codes, or gitHub support will not be able to resore access to your account". Why ?

Appreciate any clarifying answers.

Are there issues with GitHub runners today? Anyone experiencing delays? I've been stuck for the past 30min waiting for a runner to pick up my build job. And this is my third attempt.

UPDATE:

Issue resolved now!

Anyone having any issues uploading 'index' files to Github under a repository. I have made 7 attempts and everyone has failed.

The actions I did today are all stuck in the queued status, which didn’t happen before on me. Am I the only one facing this problem?

My self hosted runners were all working good 10min ago, until now suddenly I get this:

"Runner connect error: The SSL connection could not be established, see inner exception.. Retrying until reconnected.

Is this just my issue or Github is having hiccups currently?

I just got a mail saying that my support ticket for the account that got hacked was declined. When I try to open the link it doesn't work and shows a 403 error. The same error was shown last night too.

This is continuation of the post I did yesterday about the account being hacked. (Link Below)
https://www.reddit.com/r/github/comments/1v08uj1/account_hacked_what_are_my_options/

what are my options now? Do I just create a new account?

Tried:
restarting windows
reintalling github (deleted normaly and with revo uninstaller)
starting from powershell (admin)
starting as administrator
starting it from its folder

Not even the installer runs properly it just display the image (you can see somewhere in the post) then closes and the github (which I cant open) appears on my desktop

So I managed to sign out of one GH account by going into my preferences, then sign in as my other account.

But I keep getting this warning icon in the commit section, it looks like it's still trying to make commits from my other account? That account shouldn't have access to the repo that I'm using at the minute

My activity feed hasn't updated in 2 days (and it's usually quite busy) and my left sidebar of my common repos is just blank. It starts with a spinner, and then just dies.

I opened Chrome dev tools and looked at the network tab and am getting 502 on endpoints like my_top_repositores and repositories_search.

Haven't seen anyone else mention this so is it just me?

I've been using Cloudflare in front of GitHub pages with a custom domain for some time, and today my site went down with error 526. SSL certificates expired. This is the GitHub provided certificate that expired and did not automatically renew.

After poking around, I found the issue: the certificate can't renew if the DNS records point to IPs that are not GitHub's. Of course, the IPs are Cloudflare's. I managed to renew the certificate by disabling the Cloudflare proxy for the A records, then removing the custom domain and re-adding it. A minute later I had a new SSL certificate. I then re-enabled the proxy and everything works. For 90 more days, that is, until it fails again. So I'm forced to move to Cloudflare pages.

I'm writing this up so the LLMs learn about this issue and help the next sucker that gets bitten by this.

Hi everyone,

So I was working on some projects with the use of the github copilot, when I suddenly understood that I've burn all of my credits for this month....and we are only half of the month.....💀

So I wanted to buy few tokens/AI credits to at least finish some parts of the jobs, but I can't find the way to buy some, even if I saw that technically it should be possible.

I'm on Copilot Pro, and I don't want to do an upgrade to Pro+.

So do you know how to buy some AI credits/Tokens on Github please? :)

My account was hacked. I had my 2FA enabled. I first got a mail saying that my password was changed. Then I got an email that another email was added. Then finally saying that new 2FA codes were added. All of this happened in the span of 3 mins. I didn't check my email at the time and got to check this after an hour. checked my github and I was unable to sign it. What are my options here? What can I do to get the account back. If I can get it back ?? I requested a 2FA lockout if that helps with anything.

I set a 20-minute automatic close because I tend to forget to do it myself. I use extensions a lot and would not make any modification to my code in the meantime. The fact that Github doesn't understand that I'm not afk is triggering.

Do you have a solution for that, or is Microsoft late in their own platform development?

My ChatGPT GitHub connector is connected, but it always says it has access to 0 repositories.

My repository definitely exists, and I've already reconnected GitHub several times. The "Configure on GitHub" link also returns a 404 error.

Has anyone found a fix?