GitHub's official MCP server grants LLMs a whole host of new abilities, including being able to read and issues in repositories the user has access to and submit new pull …
GitHub MCP Exploited: Accessing private repositories via MCP
We showcase a critical vulnerability with the official GitHub MCP server, allowing attackers to access private repository data. The vulnerability is among the first discovered by Invariant's security analyzer for detecting toxic agent flows.
Investigating unauthorized access to GitHub-owned repositories
If any impact is discovered, customers will be notified via established incident response and notification channels.
Enterprise MCP: lessons from GitHub's MCP server launch
GitHub's Engineer shares lessons from developing GitHub's MCP server. An Arcade MCP MVP interview.
Code Repository - Git Source Control | Harness
Host Git repositories in Harness, manage pull requests, and connect every commit to secure CI/CD workflows with source-to-deploy traceability.
GitHub Stacked PRs
Break large changes into small, reviewable, stacked pull requests with first-class GitHub support.
I rebuilt Karpathy's LLM Wiki gist: what's missing
Karpathy's original LLM Wiki gist, explained and rebuilt as a working system. 44 open-source commands, plus the five things the gist leaves out.
Submit Pull Requests to WordPress Core with the GitHub-to-Patch Utility
When Matt Mullenweg asked the audience who has used Git and/or GitHub during his 2014 State of the Word address, the response was almost unanimous. “Whoah, that’s all the hands!” he exclaimed befor…
A GitHub Issue Title Compromised 4,000 Developer Machines
A prompt injection in a GitHub issue triggered a chain reaction that ended with 4,000 developers getting OpenClaw installed without consent. The attack composes well-understood vulnerabilities into something new: one AI tool bootstrapping another.
Kindly Closing Pull Requests
Getting your first pull request from an outside contributor on GitHub is an exciting experience. Someone cared enough about the problem you were solving to check it out themselves, change…
domleca/llm-wiki
Contribute to domleca/llm-wiki development by creating an account on GitHub.
Ditching GitHub
This is going to be some sort of a public service announcement, withside notes. This has been brewing for a long, long time (years), it’sjust that I never se...
Why I'm leaving GitHub for Forgejo | Jorijn Schrijvershof
I left GitHub for self-hosted Forgejo on a hardened NUC. The reason is digital sovereignty, not reliability outages. Here's the thinking and the architecture.
Extensible Software in the age of LLMs | Jeremy Morrell
Solid core + capability-based sandboxes + LLMs = Users with superpowers
Introducing our Dev Mode MCP server: Bringing Figma into your workflow | Figma Blog
Today we’re announcing the beta release of the Dev Mode MCP server, which brings Figma directly into the developer workflow to help LLMs achieve design-informed code generation.
Histomat of F/OSS: We should reclaim LLMs, not reject them
A few days ago, I came across a blog post titled On FLOSS and training LLMs that articulates a growing frustration within the free and open source software…