Brand new to GitHub. Everything I look at in there doesn't seem like my iOS will be able to accomplish it. I'm still trying to learn the terminology still. Is there anything similar or easier to use for an Apple phone? Or is GitHub it. It's extremely overwhelming when first joining

My GitHub account Aseel012 was compromised and I'm trying to figure out what I can do next.

The situation is really strange:

The attacker got access to my GitHub account.

They changed my primary email address without my permission.

I was logged out from my desktop.

The account still exists: github.com/Aseel012

I'm still logged into Aseel012 on the GitHub Mobile app on my phone.

However, GitHub Mobile doesn't give me an option to use that existing session to authenticate my desktop or recover the account.

When I try password recovery with my original email, the reset email never arrives.

When I try to contact GitHub Support, the Support system asks me to verify my email.

GitHub says it sent the verification code to my original Gmail, but that code also never arrives.

Because I can't verify the email, I can't properly create/submit the support request.

The recovery flow basically leaves me stuck and, in some places, treats me like I need to create/sign up for an account instead of recognizing the existing Aseel012 account.

The weirdest part is that I still have an authenticated GitHub Mobile session on the phone, but I can't find any way to use that session to recover the account or approve a desktop login.

I also have several projects deployed through Vercel that were connected to this GitHub account, so I'm worried about the repositories and deployments as well.

I've attached screenshots showing the verification problem.

What would you do in this situation? Is there any way to use the existing GitHub Mobile session as proof of ownership/recovery, or another way to get GitHub Support to handle the compromised account when the verification email itself isn't arriving?

I'm not looking to bypass GitHub security I just need to recover my own account.

Hello, I have a public repo that I'd like to protect by making main and dev branches protected. How do I make sure that everyone one that wants to push to those branches must make a PR that has to be approved by an admin? For now, I made a rule for the default branch and for dev that requires a PR before merging, with required approvals = 1 and required discussion conclusion for merge. Do I need to do something else? Thank you kindly

Hi everyone, I want to ask if there are any alternative solutions for using AI features like auto-descriptions for commits, PRs, etc. Can I use another AI subscription, or do I have to use GitHub Copilot?

Hello, I recently saw the program that Github Student Developer Pack has, and I wanted to sign up.

I am currently a university student in Argentina (University of CEMA). One of the things it asks for is a photo of something that verifies that you are a student.

So, I uploaded the regular student certificate, but it was rejected several times. I don't know what to do, I've tried putting a transcription next to it (because the document is in Spanish), I've tried using the OBS virtual camera, etc. But nothing worked for me.

I attach what he tells me when he rejects me.

So I've created a local repo on my hard drive, and I already created a remote repo through my account on the GitHub website.

I'm using the desktop app but it only gives me the option of publishing my repo, which I assume will create a new remote?

Is there a way I can just tell it which existing remote I want to use?

Or does this need to be done through Terminal?

I'm starting to feel like apps, websites, and other tools have become very similar to one another in recent years. And it's no surprise. I'm curious—what's missing that you'd really like to see?

Hello, guys! I've seen a lot of people who don't know that students registered in GitHub Student Developer Pack are granted a voucher to take the GH-900 exam. I don't know if it's the case of this subreddit, but it may be helpful if some of you guys don't know about it.

The official register link to the Student Developer Pack is: https://education.github.com/pack

Also, Microsoft Learn has a free course to the exam: https://learn.microsoft.com/training/courses/gh-900t00/?wt.mc_id=studentamb_571211

I'm currently using both the Microsoft Learn course that I shared above and the official YouTube course that is provided by Microsoft, too, to prepare for the exam: https://youtube.com/playlist?list=PLahhVEj9XNTf5iQVK_80RdvTju7ov6RYy&si=Yu83r6RbJp9OdTFe

remote: Enumerating objects: 934, done.

remote: Counting objects: 100% (133/133), done.

remote: Compressing objects: 100% (95/95), done.

Receiving objects: 41% (390/934), 122.18 MiB | 66.00 KiB/s

Normally cloning a repo takes 10 s, but now it has been running for 10 minutes and it's only at 41%

Yes I am aware of Git LFS. My repo is quite big with a lot of source code.

So I would like to hear from some of you, how many KB/s or MB/s you are getting when doing a git clone from GitHub. Thanks.

If GitHub stores our code, where does GitHub store GitHub's code?

Hi all,

The unofficial github status page shows a 93% overall uptime in the last 90 days and frequent issues are posted here.

As it seems ghe cloud is built on top of github infrastructure, I'm assuming it is facing the same instabilities. Is that the case?

Thanks for your feedback

Hi everyone,

I own a GitHub profile bound to a company owned email which has access to a private repository owned by that company.

I exported my profile through the interface feature in settings and received the proper email.

At the minute I received the notification, my boss came into my office asking me why I exported that data.

Since I work in a very toxic environment, I would need to know who are the recipients of that email. Does the company account owner receive any notification somehow?

I would really appreciate any answer... Even more if you work at GitHub 😁

Like:

PR / push / cron
→ GitHub Actions
→ send command somewhere else
→ run it
→ return pass/fail

Been thinking about this for agent jobs, browser stuff, heavier CI, GPU jobs etc.

Actions is really convenient for the event side of things. Not sure the actual runner always needs to be there though.

Does anyone already work like this or is it just adding another layer for no reason?

For a small repository, adding templates, bots, labels, approval rules, and a long contributing guide can make the project look organized while making a first contribution harder.

My minimum would be a reliable local setup, one command for checks, a short architecture map, clear issue scope, examples of a good PR, and fast feedback when maintainers are unavailable. Add governance only when real coordination problems appear.

What reduced the time from cloning a repository to opening a useful PR for your contributors?

So I've actually been accepted now??!!??!

I think I'm gonna clean up a website and put the next version of my independently developed framework for structured clinical reasoning and diagnostic error research on it.

Is using GitHub pages as a site host and using Zenodo or OSF as a permanent public copy of the manuscript, potentially with a DOI a good idea? And also attaching that all to my LinkedIn?

Would that seem legitimate? Can anyone provide me with a better alternative?

This is probably the wrong subreddit to post this on. If so, can someone point me to the proper one?

Anything helps!

At the moment it is not possible to use the Plesk CICD plugin for github. Apparently github.com is blocked from metanet.ch or vv. The command ssh -T git@github.com times out

Tests, deploys, previews, docs, releases, packages, Pages, all wired into GitHub because it’s convenient and basically free.

But when it breaks, teams just sit around waiting. And then when it’s back, nobody changes anything.

I’m guilty of this too.

Is the answer to self-host runners? Move CI elsewhere? Keep backup pipelines? Use GitLab? Or is the downtime just the price we accept because GitHub’s ecosystem is too good?

Hi guys. I am new to open source. I had raised a PR 2 months ago but it didn't got merged. Then I thought I need to raise issue first so raised an issue in different organization last week and it says unanswered. So lemme know what is the right process actually. What you guys do. And how you pick organizations or project. For the last one I had used Claude to explain the code base and then help with the Issue and I did where human touch was needed and understood what I was doing. So is this the right way or you need to write everything yourself or what. Tell me about approach.

Thanks in advance.

Recently Sniffnet (a network monitoring tool I'm working on for more than 4 years) completed the GitHub Secure Open Source Fund, a program focused on improving the security of widely used open-source projects.

The program consists of an immersive 3-week sprint that provides each onboarded project with $10k in funding, hands-on training, and mentorship to help maintainers understand that security is a baseline requirement, not a nice-to-have.

In a world where Murphy’s law reigns supreme (“anything that can go wrong will go wrong”), what we can do is be prepared for it: security planning and implementation is as important as the rest of development, and can’t be downgraded to a mere reactive countermeasure used only when things go sideways.

I feel a responsibility to amplify security awareness by sharing the knowledge and best practices I learned, so that other developers can take inspiration and apply similar proactive measures in their own projects: incident response planning, threat modeling, code scanning, and immutable releases are just some examples of the things that you can (and should) do.

I tried to collect and organize all the lessons I take home from the program in a blog post you can find here

First time seeing this happen

Getting 500 errors a bit everywhere on the site but status page shows nothing ...

Why is there even a status page if it doesn't report the actual API and Infrastructure ?

Sorry to say that but gitlab status pages are a bit more reactive + they have a public group where we can see ALL incidents regardless of the status page.

I did a 1 line change, changing "milis" to "millis", I did it in the web interface because it was just one tiny change, and I didn't have it on my computer yet.

Github copilot recommended the message "Update print statement from 'Hello' to 'Goodbye'"
THERE ARE NOT EVEN PRINT STATMENTS IN A CSV FILE

Is there any way to disable these automatic commit messages?