At the GitHub Satellite conference, which is being held virtually this time, several new services:
- — a full-featured integrated development environment that allows direct participation in code creation through GitHub. The environment is based on the open-source code editor Visual Studio Code (VSCode), which runs in the browser. In addition to writing code, it offers features such as building, testing, debugging, deploying applications, automatic dependency installation, and SSH key configuration. The environment is currently in limited beta testing, accessible after submitting an application.
- — a discussion system enabling dialogues on various related topics, somewhat similar to Issues, but in a separate section with hierarchical response control.
- — scans every 'git push' operation for potential vulnerabilities. The results are attached directly to the pull request. The check is performed using the engine , which analyzes patterns with typical examples of vulnerable code.
- — is now available for private repositories as well. The service evaluates leaks of sensitive data such as authentication tokens and access keys. During commits, the scanner checks for typical key and token formats used by 20 cloud providers and services, including AWS, Azure, Google Cloud, npm, Stripe, and Twilio.
Source: opennet.ru
