Installing a GitHub App on an enterprise does not unlock repository code
Enterprise installations are generally available. A concrete guide to installation boundaries, permissions, and replacing classic PATs.
Writing my thoughts on software, business, and life.
All of my long-form thoughts on programming, business, and more
When GitHub Actions logs disappear: what 120 new storage hosts reveal
GitHub added Blob hosts for Actions logs and job summaries. Published ranges and an executed local example explain how hostname allowlists differ.
Why a GitHub PR looks smaller when you hide whitespace
GitHub now saves whitespace preferences across pull requests. Two real local diffs show what becomes easier to read—and what a whitespace filter can conceal.
GitHub CLI expiring OAuth preview: audit the lifetime of copied tokens
A practical review of token caching and refresh boundaries following the GitHub CLI 2.103.0 expiring OAuth public preview.
Dependabot adds a version field: distinguish recorded data from deployed versions
Read version_requirement with its detection source, null handling and multi-version limits before changing a security integration.
Public GitHub clones may ask for authentication: audit anonymous CI paths
What the October 19 announcement covers, how to choose CI credentials, and how to verify a fix without leaking secrets.
GitHub Code Quality CSV: disabling a repository does not cut the current bill
Use the license report to reconcile overlapping committers, evaluate quality coverage, and check the next billing period.
Xcode 27 runners reach GA: validate builds and Apple Silicon separately
A migration checklist for GitHub Actions that separates toolchain selection, native dependencies, and release evidence.
GitHub license compliance GA: manage the lifetime of exceptions
License policy can now gate merges. Connect eligibility, exception ownership and review triggers to a practical dependency workflow.
GitHub retires push emails: audit the delivery path, not just the inbox
A practical review of recipients, branch scope, delivery evidence and ownership after repository push email notifications end.