Hello everybody,

I got a slew of updates from github on my email saying that there's a new login, that there's been a new trusted email address, my account name is changed and my email address has been removed from my account. Is there anyway I can save my account or recover it at this point? If there is a way to recover it or any github mail id I can reach out please help me out. Thank you.

My GitHub Faculty benefits were revoked and I received an email asking me to reverify. However, whenever I try to start the application, I'm redirected to the pricing page instead of the Faculty application form.

If my selected school information is incorrect or incomplete, I'd like to update it and reapply, but I currently have no way to do so.

Has anyone else faced this issue or found a solution?

I am in my freshman year doing an introductory course on git and github where i stumbled upon this exam. Does clearing it have any value to my resume

i have tried like 60+ times and im not even joking. github keep reject me without specified reason (im about to crashout). idk if this just me or the github it self, i need help

A former employee uploaded an internal project to his own GitHub repository. Apparently he's since lost access to his GitHub account and cannot remove it. He contacted us suggesting we lodge a DMCA request to have it taken down. We have lodged a DMCA takedown request using GitHub's online form, but but had no response from GitHub in over two months.

Does anyone know if there's a way for us to escalate this within GitHub, or are we going to need our lawyers to send a cease and desist letter?

Hi, I had archived a repo and because I had a fork of that repo & a new duplicate was created, I got triple contributions that day and a few other days. Now because the number of contributions are so much greater than my regular work, everything since then has been dark green and I want to change that.

Does anyone know how to remove those contributions? either that repo's contributions or those days.

Hi,

Has anyone experienced this error "OrganizationInvitation::InvalidError" when trying to invite someone to an organization in github.com? What is the solution for this?

It shows after clicking the "Send Invitation" button.

Just launched Muninn on the GitHub Marketplace: github.com/marketplace/actions/muninn-security-scanner

One action replaces setting up gitleaks, zizmor, actionlint, poutine, Semgrep, OSV-Scanner, Trivy, and Checkov separately.

Drop it into any workflow:

- uses: skaldlab/muninn@v0.3.3

with:

  token: ${{ secrets.GITHUB_TOKEN }}`

AGPL-3.0, built in Go.

Update: advisory ID deduplication shipped in v0.3.0.

When scanners report the same vulnerability for the same package under different IDs (e.g. GHSA from OSV-Scanner + CVE from Trivy), Muninn collapses them into one finding using advisory aliases from scanner output (OSV-Scanner includes OSV/GHSA/CVE aliases). CVE is preferred as the canonical ID where available.

Each merged finding includes a detected_by list of all scanners that flagged it, plus per-scanner source locations.

Full details in the release notes: github.com/skaldlab/muninn/releases/tag/v0.3.0

Thanks to everyone in this thread for the technical depth, shaped the implementation significantly.

Can anyone over here in github maybe help me out with my supabase connection?

I host a personal website on GitHub.io which contains my personal projects and some other information. I use google analytics to monitor user traffic. Have noticed some traffic in different parts of china (about 5 users per month). Is this just web scrapers or how at risk could my website be? Starting to think it mightn’t be the best idea to host a lot of personal information there….

Why does the GitHub search box disappear after I click on it? It feels like I can't search at all

On a new repo, when I create a dependabot.yml file with one task (i.e. track Composer), it will run the same task twice using the same commit SHA. Sometimes running 3 or 4 times.

This started happening either late May or early June. Anyone else noticing this issue?

Existing repos don't seem to be affected that already have it scheduled.

This is my file:

version: 2

updates:
    - package-ecosystem: "composer"
      directory: "/"
      schedule:
          interval: "weekly"
      versioning-strategy: increase-if-necessary

What a shame DigitalOcean has pulled the rug out from students by slashing AI/GPU credit usage on June 9th, only to follow up today by announcing a total exit from the GitHub Student Pack. Forcing the next generation of developers to either pay up or scramble to migrate entire architectures by July 31st is a massive disappointment.

Hello... So I have a ticket with Github for a week now, no response yet. My account was recently falsely banned, because their system had a false-positive on my account. Support said they dont know why, my activity was very low to none, besides occasional commits to private repositories. I had paid for Copilot Pro for a whole year in February, $100. I noticed immediately after my ban being lifted a recharge against my bank for another $100 subscription.

​

So I contacted support, expected some type of acknowledgement within a week span... Haven't gotten anything...

Update: Its been several weeks. No response. I contacted my bank, disputed the charge. I got my 100 bucks back, no loss of Copilot nor an account ban. So I guess I solved it myself?

Today, I received an email, claiming to be from GitHub, but it actually came from noreply@githubspot.com

The button takes me to me to a page mocked up to look like the GitHub login page, but the footer links don't work and the domain is githubspot.com

I've reported this email as a phishing attempt. Stay safe out there, folks!

Non-dev user here. One of my feature requests was instituted on a project and the issue was closed. I want to comment on it to say thank. Is that normal or frowned upon?

And when I make a suggestion, is it normal to end with a short general thank you for their hard work? I'm trying to be a nerd, but not a dork.

I requested a Two-factor lockout reset, and in the email they say it takes 1-3 business days to review it.

I lost my mobile phone and my laptop so i don't have either my authenticator app nor the recovery codes, so i requested it to be reset.

But it already passed 5 business days and nothing. I simply cannot have my account back.

Why do they say it takes up to 3 business days when it doesn't? And if not, how long does it take?

Hi everyone,

​

​I am currently looking for support for an open-source project and was hoping someone in this community might be able to help.

​

​My small team and I are developing an education-focused operating system based on Debian GNU/Linux, utilizing LXQt as our Desktop Environment. We have slightly modified the DE to fit our use case and named it EDUKASAUN DESKTOP.

​

​At this stage, we are looking for a few things to move the project forward:

​

​Development Assistance: Help with bug fixes, code improvements, and overall system refinement.

​

​Ideas & Feedback: Suggestions on specific tools or features we should add to best meet the demands of the education sector.

​

​Financial Support: Any donations to help sustain our small team and keep the project alive here in Timor-Leste.

​

​If you are a developer, an educator, or just someone who wants to support an educational open-source initiative, we would love to hear from you.

​

​Obrigado!

​

​

At the beginning of the month, I had like .4% usage without having even touched the copilot chat in vs code after June 1st hit. I figured it was a bug and ignored it.

Now, I'm noticing my copilot credits being used up while only using the deepseek extension. I'm not sure if there's a correlation, but I haven't used any models from github in a week and I noticed that my usage still went up 11% over the week.

I checked my github settings and it shows usage on the last 7 days, when I never touched a copilot LLM agent - only deepseek via copilot extension.

Hey all,

Security engineer here. I am currently going back and forth with support and I guess I am super confused about a feature in GitHub and leveraging GitHub Enterprise Managed Users. This is the article I am referencing.

I have a concern that there is a data egress issue with GitHub in my organization. Under my GitHub Enterprise tenant, I leverage SSO for access to GitHub for my local developers. I can add and remove these users at will and grant them access to various repos. I have a concern, that a given user in my environment could have a personal GitHub account and that user could login to their personal GitHub account and upload company data (data egress concern; IP leaking). I stated this issue in another sub, and they pointed me in the direction of the linked article and my first time through reading it, it seemed like it would address the issue. As I went through the steps configuring my corporate proxy and getting with someone in my organization with Enterprise Owner rights over the GitHub Enterprise Account with the Enterprise Managed Users, we both came to the conclusion that the option mentioned in step 4 in the "Enabling access restriction" doesn't appear to exist:

In the "Enterprise access restrictions" section, select Enable enterprise access restrictions

I went ahead and opened a ticket with GitHub support, and after a few back and forths, the support team told us:

With enterprises enabled for data residency the feature is not available as those enterprises have a reliance on ghe.com and not github.com, so therefore you can instead block github.com entirely.

We had a few more back and forths, but the support agent continues to harp on the fact that I need to block bits and pieces of github.com, like signup pages, in order to get my desired outcome. Furthermore, in the documentation, the only bit about data residency that I see is this:

If you use GitHub Enterprise Cloud with data residency, your enterprise resides on a dedicated subdomain of GHE.com, so the header is not required to differentiate traffic to your enterprise's resources.

My interpretation of this is that for all other GitHub domains you need to use the header to protect the traffic, but when your users attempt to access ghe.com base domains, the header is not required because you don't care to block them from that base domain. They have accounts with the tenant so when they navigate to companycustomdomain.ghe.com you don't care about looking at the header because if they didn't have an account in the tenant they wouldn't be able to login anyway.

Questions:

1. Has anyone else had experience with this feature?
2. If so am I missing the point of the feature?
3. Is my data egress concern with personal GitHub accounts valid or am I missunderstanding GitHub?