GitHub

What 50 open source projects taught us about security in the AI era. Session 4, of the GitHub Secure Open Source Fund, included many important open source projects, including 🦞 OpenClaw. 💡 One lesson emerged consistently: AI can help maintainers investigate, prioritize, and respond faster. Maintainers still provide the context, judgement, and accountability required to decide what ships. 👉 Read more: https://lnkd.in/gedQAQBc #AI #cybersecurity #opensource

👉 Copilot code review depth is now up to you. Balanced depth is now generally available. Select Balanced for deeper analysis and more thorough reviews on your pull requests, or choose Lite for straightforward changes. Set the default depth at the org or repo level, or select depth when requesting a review on your PR. Balanced or Lite, get the right-sized reviews for your PRs. ✅

Could OpenClaw be the Linux of AI? 👀 Dave Morin of the OpenClaw Foundation explains why it goes beyond the typical AI chatbot. ▶️

AI coding agents can produce features in minutes, but the result can be one enormous pull request spanning data models, APIs, application logic, and UI. 😬 So how do teams keep AI-generated changes reviewable? Stacked pull requests offer a structured solution. 💡 Instead of delivering the entire feature in one diff, developers and coding agents can break it into small, logically ordered layers. Each pull request addresses one concern, has a clear dependency, and can be routed to the right reviewers. Reviewers get a more manageable workflow, too: ⬇️ Read top-down to understand the feature's end goal. ⬆️ Review bottom-up to validate each foundational layer in order. When feedback changes a lower layer, gh stack commands help rebase and sync the dependent branches. Learn how to turn one giant AI-generated pull request into a focused, reviewable stack. 👇 https://lnkd.in/etHt_8PA

In Session 4 of the GitHub Secure Open Source Fund, 50 open source projects upgraded their security posture through AI-assisted workflows, maintainer expertise, GitHub security tools, expert guidance, and funding. As AI changes how software is built, reviewed, and secured, maintainers remain at the center of protecting the open source ecosystem. Here's what these projects learned and the impact they made. 👇 https://lnkd.in/eDzvmS7Y

🆕 Google AI's Gemini 3.7 Flash is now generally available and rolling out in GitHub Copilot. Early testing shows: ➡️ improvements in web and app development and agentic coding workflows ➡️ improvements in code quality, final-output presentation, codebase research, and verification during complex coding tasks Try it out in the GitHub Copilot app, CLI, and Visual Studio Code. https://lnkd.in/exnbNfa5

GitHub case-folds every byte of code search at over 45 GiB/s on one core. The biggest win came from removing an early-exit branch, not adding one. https://lnkd.in/gJ7ZDpeE

We want you to decide which session will take the main stage at #GitHubUniverse. Vote for your favorite at gh.io/shapethelineup