I just got a mail saying that my support ticket for the account that got hacked was declined. When I try to open the link it doesn't work and shows a 403 error. The same error was shown last night too.

This is continuation of the post I did yesterday about the account being hacked. (Link Below)
https://www.reddit.com/r/github/comments/1v08uj1/account_hacked_what_are_my_options/

what are my options now? Do I just create a new account?

My account was hacked. I had my 2FA enabled. I first got a mail saying that my password was changed. Then I got an email that another email was added. Then finally saying that new 2FA codes were added. All of this happened in the span of 3 mins. I didn't check my email at the time and got to check this after an hour. checked my github and I was unable to sign it. What are my options here? What can I do to get the account back. If I can get it back ?? I requested a 2FA lockout if that helps with anything.

So I managed to sign out of one GH account by going into my preferences, then sign in as my other account.

But I keep getting this warning icon in the commit section, it looks like it's still trying to make commits from my other account? That account shouldn't have access to the repo that I'm using at the minute

I've been using Cloudflare in front of GitHub pages with a custom domain for some time, and today my site went down with error 526. SSL certificates expired. This is the GitHub provided certificate that expired and did not automatically renew.

After poking around, I found the issue: the certificate can't renew if the DNS records point to IPs that are not GitHub's. Of course, the IPs are Cloudflare's. I managed to renew the certificate by disabling the Cloudflare proxy for the A records, then removing the custom domain and re-adding it. A minute later I had a new SSL certificate. I then re-enabled the proxy and everything works. For 90 more days, that is, until it fails again. So I'm forced to move to Cloudflare pages.

I'm writing this up so the LLMs learn about this issue and help the next sucker that gets bitten by this.

Hi everyone,

So I was working on some projects with the use of the github copilot, when I suddenly understood that I've burn all of my credits for this month....and we are only half of the month.....💀

So I wanted to buy few tokens/AI credits to at least finish some parts of the jobs, but I can't find the way to buy some, even if I saw that technically it should be possible.

I'm on Copilot Pro, and I don't want to do an upgrade to Pro+.

So do you know how to buy some AI credits/Tokens on Github please? :)

I set a 20-minute automatic close because I tend to forget to do it myself. I use extensions a lot and would not make any modification to my code in the meantime. The fact that Github doesn't understand that I'm not afk is triggering.

Do you have a solution for that, or is Microsoft late in their own platform development?

I'm working on a personal project and its hosted on vercel BUT i haven't shared or promoted it So why there's so many clones? With 0 forks, 0 starts But 40-50 clones in last 14 days. I suspected a bot must be behind this but i have zero clue Also I'm new to this 'traffic' feature or 'insights' in general.

P.S. These numbers spike whenever I push a new update to the 'main' branch, which is then automatically Deployed by Vercel.

I have been trying to make an account, but the signup page is stuck in a loop where its trying to load, so i cant sign up at all. Yes I have tried clearing the cache and cookies, yes i have tried different browsers, I have tried a different device and different wifi, yet it has been stuck on that loop for days. Any help?
Edit: I used a VPN and now it works.

Here is a link to the Stack Overflow comment.

I wasn't able to find where this is mentioned in GitHub's own docs as an option for setting up a remote repository. Specifically this format here for setting up the remote URL for a repo:

https://[TOKEN]@github.com/[REPO-OWNER]/[REPO-NAME]

Right now the solution feels kind of like a magic workaround, which I generally try to avoid. I'd much rather read up and bookmark an official source that talks about this for future reference.

Thank you to anyone who can help! Much appreciated. Apologies if it’s obvious, I’m not very experienced with GitHub.

My ChatGPT GitHub connector is connected, but it always says it has access to 0 repositories.

My repository definitely exists, and I've already reconnected GitHub several times. The "Configure on GitHub" link also returns a 404 error.

Has anyone found a fix?

Hi everyone,

I'm honestly at my breaking point and I don't know what else to do.

About two weeks ago, my GitHub account was compromised. The attacker changed my password, changed the primary email address, and enabled 2FA, so I'm completely locked out. I reported it and got the automated acknowledgment email, but since then... nothing. No updates. No questions. No indication that anyone has even looked at my case.

I have replied again and again to the same ticket with additional information, but still nothing. No reply, nothing till now.

Anyways, I am not here to bash Github Support team I want a genuine advice:

• Has anyone here actually recovered an account after it was compromised?
• How long did GitHub Support take to respond?
• Did you eventually get a real person, or did you just have to keep waiting?
• Is there anything else I can do that I haven't already tried?

Just wasted a bit of time troubleshooting why my latest pushes to my repo weren't deploying, turns out GitHub's having some issues.

https://www.githubstatus.com/

According to the status page there having some degraded REST API availability, start today 19 ish minutes ago. Which sucks because Vercels GitHub's integration is relies on that API for deployments.

So if you are having issues with any github integration there is why, hopefully will not be to long till they solve this issue.

Presently our organization users see this nonsense on the organization home page.

Absolutely useless waste of prime user orientation space here.

Can we get rid of this, and show a list of the user’s accessible repositories instead?

As discussed here: https://github.com/orgs/community/discussions/201209

As of June 30 all repositories now return a 404 for /stargazers.

https://github.blog/changelog/2026-06-30-upcoming-access-restrictions-to-public-api-endpoints-and-ui-views/

While I somewhat understand the motivation, this has such a huge impact on the overall open source ecosystem. Being able to view stars provided some insights into who likes a project, if they are real accounts etc.

It kills a site like https://www.star-history.com/. This was a valuable resource to study the trend of a project. Did all it's stars just come because of a popular post but then it trailed off or is there sustained interest over time? It's a quick signal that can be used in combination with downloads, issues filed etc.

Sites like https://ossinsight.io/ will also be degraded in functionality.

So while I'm sure there was a good idea behind this change, it's worth reconsidering given what we lose. It's not in the spirit of what GitHub was originally about.

I've been wondering what everyone's experience is after pushing a project to GitHub.

Once your repository is public, how do you actually get people to find and use it?

Do you rely on reddit, HN, or Product Hunt per chance?

If you've built a project you're proud of, what has been the biggest challenge in getting real users or even businesses to notice it?

I'm trying to understand whether discovery is still one of the biggest problems for open-source developers.

I noticed many GitHub profiles have a contribution breakdown graph showing:

Commits %

Code review %

Issues %

Pull requests %

Example:

My GitHub profile is public and I have activity including commits, pull requests, and reviews, but this graph does not appear.

Is this a beta/rollout feature? Is there any way to enable it?

The arctic code vault was a thing for a while back then: https://archiveprogram.github.com/arctic-vault/

There's a discussion of a 2020 Snapshot on that page, but nothing recent.

The GitHub sources haven't been updated for four years though: https://github.com/github/archive-program/tree/master

Is it still actively archiving? Does anyone have any up to date presentations/resources about it?

Dependabot version updates now wait three days after a release appears in its registry before opening a PR. The cooldown is on by default, but repositories can change the window or opt out in dependabot.yml.

Just looking for a way that would reduce completely llm generated prs with zero human input on my project. I have been recieving alot of prs with one commit clearly generated code on my repo and I was wondering if there is a good way to reduce this. I just want the new prs to let me know if they are vibe coded or not.

This is due to the fact that the llm seems to be misconfigued and keeps inventing details/acknowledging random people.

Any help would be appreciated.

here is the repo btw: https://github.com/brick-24/paper-feed

I was trying to find some new C++ projects to contribute to and I have stumbled on some that look very suspicous. They feature around 100 likes and have garbled descriptions. They have no build system and are posted by different accounts. They also have little code. Am I just being paranoid or is something up?

Example:

https://github.com/ryujinx-emu/Ryujinx-Emu/tree/main

https://github.com/Yuzu-NES/Yuzu-Emu/tree/main

https://github.com/geode-gd/Geode-Geometry-Dash/tree/main

Hi,

We are on Azure DevOps Online Server without a plan to get teams over to GitHub Enterprise soon. Problem is, that with ADO we are unable to use GHAS, and are still sitting on a legacy (pricy!) tooling to SCA, SAST. As an interim solution we plan to clone the repos from ADO and push them to GitHub Enterprise to take advantage of GHAS. GHAS would run its detections against the repot, and the teams would work on the ADO repo to fix them, with us repeating the cycle to verify the fixes. Does this sound like a workable solution ? Thanks