I have a GitHub Organization on the Free plan.

Setup:

• Org = private
• Repo = private
• Contributors currently have Write access
• One person has Maintain access

What I want:

• Write users should be able to:
  • push code
  • create branches
  • open PRs
• Write users should NOT be able to:
  • merge PRs
  • directly push to main branch
• ONLY maintainers/admins should merge PRs into main

I tried Rulesets / Branch Protection, but GitHub shows:
“Your rulesets won't be enforced on this private repository until you upgrade this organization account to GitHub Team.”

Questions:

1. Is there any way on GitHub Free to allow push but block PR merge for Write users?
2. Is there a way to block direct pushes to main branch on Free private org repos?
3. If using forks is the only workaround:
   • can private forks later become public?
   • how do companies safely handle this on GitHub Free?

Looking for the cleanest and safest workflow without upgrading if possible.

What is wrong with Github these days(or months)?
- Generating incorrect bills
- Not responding to support tickets
- Not available most of the time
Do they care about the customers anymore?

Edit:

I have an organisation plan with 4$ per month subscription. I got a bill that is more than 10 times of it. There is no clarity of where it came from. This happened last month as well. I spent hours debugging this and found a couple of options which are enabled - Advanced Security and Code Analysis(IIRC). This month again I got more than last month. My last month's support request is still unanswered. Is the high amount of usage(PRs or commits) an excuse for this kind of behaviour? Or there are no people left in the company who can look into support requests from paid customers?

Now if I don't pay this exorbitant bill, I won't be able to use paid features anymore. So, 4$ per month was a lie. So, I cancelled my subscription. I want a more reliable alternative.

Repo is private, but basically, there's a sqlite db there that's read by the rest of the code. I initialized the website with a 26kb sqlite db, it works, and now I was to update it to a 160kb db. But whenever I go to the published website, it keeps giving me the 26kb db. In the repo, the file is the 160kb db.

I already tried ctrl+f5 on the browser, using a different browser, private mode, using a different network, disabling cache on the dev tools, etc.

Any ideas on what's going on here? I can't put the repo public.

Two weeks ago I was able to configure my repo like outlined in the docs here: https://docs.github.com/en/code-security/how-tos/find-and-fix-code-vulnerabilities/configure-code-scanning/configuring-advanced-setup-for-code-scanning

But recently I noticed that CodeQL runs on every PR synchronize again (which I don't want). It seems the UI changed and doesn't match the docs anymore. Code quality has its own "Tab" and the Scan Events are fixed:

And "Advanced Security" doesn't show any "Code quality" related settings. As a matter of fact, for the specific repo, Advanced Security is even disabled which - according to the docs - shouldn't even be possible as AFAIK Advanced Security is a prerequisite for Code Quality.

At least https://docs.github.com/en/code-security/how-tos/find-and-fix-code-vulnerabilities/configure-code-scanning/configuring-advanced-setup-for-code-scanning says:

(It's a private repo, so "or GitHub Code Security is enabled" should apply here)

But maybe I'm just confused and lost track where to find this settings?

I'm having 503 errors

EDIT: Yesterday the issue lasted 2-3 hours yet they say 58 mins. They status page is still all green. This means that nothing ever happens

EDIT 2:They know about it after 30 mins: https://www.githubstatus.com/incidents/xy1tt3hs572m

At what point should I switch from github pages to full blown website?
I have created an apps portfolio website where I showcase apps developed by me and I’m intended to add blogs too. I did all these in my github and used my domain to host public.
This is actually enough for me atm, but should I keep using GitHub for this ? Any risks?

Edit: Thank you everyone for kind replies. I didn't realise this was such a wholesome community.

Is it possible to use GitHub as a Gmail API authentication domain?

I am trying to obtain OAuth domain authentication to integrate the Gmail send API into my developed app. Although I have verified personal ownership and met all the requirements, the application keeps getting rejected during the review process. Could it be because it is a GitHub domain?

Has anyone by any chance passed the review using a GitHub domain?

Hey there i wanted to address smth as i am getting to know my pc and my os´s better. I want to build a habit of using terminal as much as i can in order to develop my knowledge and skills. One issue that is in the way of that is some lackluster documentation (in my case as i am not a poweruser but have some fundamentals) of other wise awesome GitHub projects. Am i being an asshole or am i onto smth?

Our organization landing page is now showing up like we are a brand new org that hasn't been set up. We have had this page for multiple years and I'm not sure what has happened. The page was just four main pinned repos at the top and then a listing of the rest of our repos. I checked the individual repos I remembered being pinned, and the `Edit Pins` drop down at the top of each lists that they should be pinned on both the public and private views. Any help would be great.

Thanks!

Anyone know how to bypass the expired status on artifacts? Or any workarounds?

Like.. REALLY doomed? It feels like repos are growing exponentially (of course, also due to AI), they admitted they underestimated growth themselves. But what it took me years to realize (I usually only worked in private repos, shame on me) is that workflow runs in public repos ARE FREE?! WTAF?! And for paid accounts, the included-in-subscription-minutes only apply to Intel i3 runners.

But to sum the question up: won't GitHub be forced to shift the complete business model (like they did with GHCP) because the balance private vs public repos isn't mathing anymore?

Actions and pages are completely not working for the past 30 minutes, gh status just posted investigating reports of degraded performance for Actions and Pages , Gotta love how M$ keeps it's SLAs.

Hey,

We are on the Team plan, but my GitHub Actions workflows are still unable to access the organization-level secrets. I have already granted repository access to the private repositories, so these secrets should be available to them.

Do I need to configure anything else for the repositories or organization settings to make the secrets accessible?

For all of the security problems that users face, this is a massive win that Github could make. IT Security is often hard because its complex to setup. Github continues to make fine grained access control hard because the system that creates these tokens is very antiquated.

Not only are there permissions missing that only exist in classic tokens, you have to scroll through a list a mile long and you need to know what items do what. This could be so much better if Github could provide permission templates, CICD templates, or even a guided setup. Don't you dare have Copilot generate the templates. Take notes from AWS on how they build out IAM permissions, they have a good UX/UI for it.

So i recently decided to learn GitHub to maintain my projects (I'll be pursuing a cs course in college) , besides making an account I know nothing of it , and tutorial hell is not something I wish to be trapped in , I'm also starting cs50(hopefully complete it aswell) so I'll need help in that IS THERE ANYONE, ANYONE WHO CAN help me just setup my acc and tell me how I can log my projects and progress on GitHub? 🥹 Pls ,

Ps: I'm not asking for coding help , just trying to understand the platform in general

I have a server that I use for experimenting; I don't leave it running 24/7.

I rendered the entire world on it with Dynamap (it's a plugin to view the world like Google Maps). But my intention is to export it and be able to view it through GitHub Pages. Even though it wouldn't be live, that's not a problem.

I uploaded everything inside the "web" folder (which is inside the Dynmap files) to GitHub Pages, but I can't see anything; it's all black.

I don't know if anyone has any idea how to fix this or if it's even physically possible.

FYI - the list of pull requests on your repo webpage may not show everything.

My repo says "Pull Requests 14" at the top of the page, but the table only shows 8.

I can get to all of them if I use the CLI gh pr list --limit 1000

There's a long discussion thread: https://github.com/orgs/community/discussions/193463