The GitHub Blog

Highlights for Game Off 2018

2018-12-22T00:00:00+00:00

Game Off just wrapped up with over 300 games submitted making it our largest event yet! This year’s theme–HYBRID–proved to be both fun and challenging.

Here are the winners as voted on by the game developers themselves. You can also view all of the entries’ ratings on itch.io.

Overall Winner: Singularity

Singularity puts you in control of a robot exploring the planet, where economy and industry have collapsed and humans are facing extinction. The code deep within your neural network urges you forward, but your robotic parts are easily damaged. Destroy and hybridize parts of other robots to repair yourself. The creators Kendall Breivogel, Sean Collins, Alexander Runnels, and Alexandre Thorp want you to try to become the ultimate AI—do you accept this challenge?

► Play (Windows, Linux) · View source (Unreal Engine, C++)

Best Gameplay - MIX UP

MIX UP is a colorful and polished match three puzzle game from @guoboism. If you liked the challenge of 2048, you’ll love this!

► Play (Web, Windows, macOS) · View source (Unity, C#)

Best Graphics - Fire of Kala

Defend your base against the enemy horde in Fire of Kala—a beautiful, unique hybrid platform and tower defense game.

► Play (Web) · View source (Unity, C#)

Best Audio - Home

Home is a delightful game from @sharpfives, where you have to help your hybrid hero find a way off of an abandoned planet. What adventures await your hero? There’s only one way to find out!

► Play (Web) · View source (Phaser, JavaScript)

Innovation - Lens

Point, click, and drag your way to victory in Lens—a unique Window manager meets physics puzzle game from @notexplosive. You’re sure to have a nostalgic time playing this one.

► Play (Windows) · View source (Lua)

Theme Interpretation - Blow the Shark Down

Hybridizing both game characters and genres, Blow the Shark Down is a remarkable turn-based combat game featuring hilariously animated Sharkmen. This gang of beasts will entertain parties of up to four!

Note: At least two controllers required 🎮 🎮

Controls: ↑ ↓ ← → - move · A - hook · B - cross punch · Y - headbutt · X - uppercut · RB - block · BACK - taunt

► Play (Windows) · View source (Unity, C#)

Staff picks

While we can’t list all 330 games, here are a few that kept us entertained.

Editor’s note: Lee actually did try to list all 330 games with screenshots and videos in this blog post!

D-Tac

D-tac is a prototype for a Doom, turn-based tactics game that allows you to load Doom-compatible .wad files. Think Doom meets X-COM in your browser (while using a .wad from Freedoom).

► Play (Web) · View source (three.js, JavaScript)

Did you know? Doom just celebrated its 25th anniversary! Get lost in the original Doom source code, a Doom renderer written in Rust, a handy little Doom editor, or a roguelike version. You also finally have an excuse to play with machine learning and train some bots to play better than you with Arnold or ViZDoom :godmode:

GRIMCURSE

GRIMCURSE is a fast-paced gallery shooter and top-down RPG hybrid. Think Duck Hunt + Pokemon + Time Crisis…hard to imagine? Give it a go and see for yourself.

► Play (Web, Windows, macOS) · View source (Construct)

Three Course Meal

Three Course Meal is a cooking-based rhythm game that will get you in the mood for some festive cooking, baking, and eating.

► Play (Windows) · View source (GameMaker)

Jack of Spades

What happens when you cross an RPG and a card game? Jack of Spades!

► Play (Web) · View source (PICO-8, Lua)

Monster Pong

Monster Pong is a Pong / Breakout hybrid with monsters. Defeat them, steal their body parts, and win the game—it’s that easy.

► Play (Web) · View source (JavaScript)

Machinaria

Manipulate public opinion with Machinaria, a game where you can collect and organize news material to favor one of the candiates in the presidential election.

► Play (Web, Windows, macOS, Linux) · View source (Godot, GDScript)

Lettris

Lettris from @bamsarker is Tetris with letters. Make WORDS and score POINTS!

► Play (Web) · View source (Phaser, JavaScript)

Ouro

Ouro is local multiplayer game combining elements of Pong and Snake. Can you get a high score? Try it out with this classic.

► Play (Web) · View source (Phaser, JavaScript)

Blank Bit

Jump, dash, boost, and erase your way to victory in @pfail’s Blank Bit—a very challenging, but very fun game combining elements of a card and platform game.

► Play (Web) · View source (Unity, C#)

Until next year!

There are lots more to play. Over 300 to be exact! Check them all out on itch.io and let us know your favorites! Share your screenshots, highscores, faux pas, and everything in-between with #GitHubGameOff!

Game Off will be back in 2019! Thank you again, everyone who participated. Thanks for playing. And thanks to itch.io for providing a great platform for indie game developers and jammers! Happy holidays <3

Release Radar · November 2018

2018-12-21T08:45:00+00:00

Welcome to the latest edition of Release Radar, where we share the projects popping up on our radar—from world-changing technologies to weekend side projects from this past November. Most importantly, they’re all projects shipped by you.

eDEX-UI i 1.0

Do you ever wish that using your computer was a little less Office Space and a little more Tron? Then eDEX-UI 1.0 was made for you, providing a terminal loaded with movie-inspired graphs, maps, and a touch-screen keyboard.

Learn more from the release notes

HTTPie 1.0

HTTPie is a command-line tool that helps you interact with web servers. It’s like a super-powered curl with colorized output, JSON formatting, and persistent sessions. With its latest release, HTTPie has joined the 1.0 club! This version adds an automatic default color scheme, future-proofing for TLS 1.3, and so much more.

Learn more from the release notes

Did you know? The Hypertext Transfer Protocol reached 1.0 in 1996.

HTTP Prompt 1.0

HTTP Prompt, an interactive HTTP client, (and companion to HTTP Pie) is also celebrating a 1.0 release. HTTP Prompt helps you explore and debug APIs with autocompletion, OpenAPI specification integration, and automatic cookie handling. With version 1.0, HTTP Prompt adds support for the HTTP CONNECT method, a command to clear the screen, and some bug fixes.

Learn more from the release notes

SVGR 4.0

SVGR is a tool that helps you turn SVGs into React components. The SVGR 4.0 release promises to be “lighter, better, faster, stronger,” all while sporting a new engine and bug fixes.

Take an example SVG and run it through SVGR:

$ npx @svgr/cli --icon --replace-attr-values "#063855=currentColor" icon.svg

import React from 'react'
const SvgComponent = props => (
  <svg width="1em" height="1em" viewBox="0 0 48 1" {...props}>
    <path d="M0 0h48v1H0z" fill="currentColor" fillRule="evenodd" />
  </svg>
)

export default SvgComponent

Learn more from the release notes

svgedit 4.0

SVG-edit is a browser-based SVG drawing tool created with JavaScript to help unleash the inner artist in all of us. And it just reached the 4.0 milestone. In this release, SVG-edit has migrated several APIs from using callbacks to Promises.

Learn more from the release notes

Did you know? SVG-edit has a nifty live demo so you can get drawing right away.

buku 4.0

Buku is a private, local tool to help you store and manage your bookmarks from the command line. 4.0 must’ve been an auspicious number in November, because Buku 4.0 features new keyboard commands searching and opening bookmarks, enhanced clipboard support (for tools like Screen and tmux), and bug fixes.

Learn more from the release notes

Did you know? There are more tools in the Buku ecosystem, like a web interface, a browser extension, and more.

Pelican 4.0

Pelican is a static site generator that helps you turn your reStructuredText, Markdown, or AsciiDoc into HTML you can host most anywhere (including GitHub Pages, if you were so inclined). Pelican had a 4.0 release in November that adds a bunch of new features, such as draft status for pages, new signals for extending Pelican, settings to help translating sites, and much more. And we get it 4.0: you’ve had a big month.

Learn more from the release notes

Did you know? The distinctive, stretchy skin beneath a pelican’s bill is called a “gular pouch.” The birds use them to catch fish.

Filament 1.0

Filament is a cross-platform physically based rendering engine that can render materials in an impressive and realistic-looking way. Filament has just reached version 1.0. This release adds iOS support, expands the documentation for JavaScript, and fixes bugs.

Learn more from the release notes

Alda 1.0

Sing along if you know the words: ♩ ♬ Alda is a programming language for making music! ♪ ♫ Alda has recently released version 1.0, though it’s no mere humble beginning. Alda is already a capable language that can generate MIDI instrument sounds from source files or through an interactive REPL. You can learn more about the origins of Alda from this blog post by Alda’s creator. :metal: Here’s what the syntax looks like:

(tempo! 90)
(quant! 95)

piano:
  o5 g- > g- g-/f > e- d-4. < b-8 d-2 | c-4 e- d- d- <b-1/>g-

flute:
  r2 g-4 a- b-2. > d-32~ e-16.~8 < b-2 a- g-1

Learn more from the changelog

Kaku 2.0

Kaku streams music from web sources like YouTube, SoundCloud, as well as Vimeo on Windows, Mac, and Linux. Kaku recently released version 2.0, which features improved automatic updates thanks to several internal updates and changes to the project’s build process.

Learn more from the release notes

CMS.js 2.0

CMS.js turns your Markdown-formatted content into a single-page web application that doesn’t require any server-side code. The project is “in the spirit of Jekyll” and plays nicely with static-file hosting, much like GitHub Pages. Version 2.0 adds a host of new features, like tagging, search, and some smart-looking themes.

Learn more from the release notes

That’s just a handful of releases you shipped last month—keep them coming! If you’ve got a release that should be on our radar, send us a note.

A few of our favorite 2018 ships

2018-12-20T08:45:00+00:00

Sometimes the smallest ships have the biggest impact. With 2018 coming to a close, we’re providing a round-up of what we shipped and what you may have missed, both big and small. We didn’t include every launch of the year (that would make for a very long read), but we did recap this year’s most loved ships.

Collaboration

The developer community is at the heart of GitHub. It’s where new developers get started, where experienced developers expand their knowledge, and where all developers work together. As the number of software developers worldwide continues to increase, the opportunities for collaboration increase as well. We strive to build experiences that make it as easy and intuitive as possible for all developers to do their best work. Here are some ships that make collaboration on GitHub even better:

Suggested changes: Quickly make and incorporate suggestions, like fixing typos or changing code, during the pull request review process.
Watch releases: Limit repository notifications exclusively to releases. Receive notifications when new releases are published in a repository without receiving notifications about other updates and conversations.
Move issues from one repo to another: Repository admins can move issues across repositories and place them where they belong.
Related issues: When you create a new issue, you’ll see a list of all related issues in your repository, so you can avoid opening a duplicate issue.
Commit co-authors: See who has contributed to every commit, regardless of how many contributors there are. Every author gets attribution in the pull request and in their contribution graph.
Hovercards: Hover over a contributor’s avatar to get an overview of their profile, what teams they belong to in your organization, if they are a code owner, if they’re making their very first pull request, and more.
New tools for open source maintainers: We released a few new tools in 2018 to make the lives of open source maintainers a little easier.
Saved replies keyboard shortcuts: It’s now even easier to use saved replies with keyboard shortcuts.
Label improvements: Now you can add emojis when words just aren’t enough, add descriptions for more context, search through your labels, and preview how your label will look while editing.
Profile activity overview: The new activity feed allows you to easily show off contributions you make. In addition to filtering your contributions by calendar year, you can now filter by organization and see where you contributed over your time on GitHub.
Save a notification for later: Bookmark any notification to move it into a prioritized list.
Issue and pull request templates: Issue templates better support automation and standardization. Automate assignees, labels, and even suggest issue titles. You can also add more than one issue and pull request template to get the right information from the start.
Improvements to projects: Projects got a lot better in 2018. From automation and UX improvements to enhanced permissions capabilities, projects are better than ever. Updates include:

Business

This year, there are new ways for businesses to stay secure, keep developers learning, and increase collaboration across their organizations.

Learning Lab: Learning Lab is an interactive, bot-driven learning experience for developers learning Git, GitHub, and software development skills and workflows—now customizable to specific workflows and scalable across organizations. With recent updates, organizations can create custom courses specific to their own workflows, policies, and growth paths, so developers can continue to level up their skills on the GitHub Platform.
GitHub Enterprise 2.12-2.15: GitHub Enterprise saw three major releases this year, with our latest 2.15 version that was released at GitHub Universe. The start of the show for 2.15’s release was GitHub Connect, meant to unify the developer experience across different organizations and deployment types.
GitHub Connect: GitHub Connect breaks down organizational barriers, unifies the experience across deployment types, and brings the power of the world’s largest open source community to teams at work. With GitHub Connect, companies can enjoy the scalability and ease-of-use of our cloud offering with the control of on-premises.

Platform

Developers should be able to choose the tools that are right for them, and it’s our job to make this as easy as possible by keeping GitHub’s platform and ecosystem open. In 2018 we doubled down on this commitment by releasing new integrations, APIs, and improved versions of well-loved platform products. Here’s our top platform ships of the year:

GitHub Actions: Build, connect, execute, and share code to customize your software development workflow with GitHub Actions. Easily package, release, update, monitor, and deploy your project, in any language—on GitHub or any external system—without having to run code yourself.
Google Cloud Build: Create fast, consistent, reliable builds across all languages. Easily set up CI through Cloud Build and automate builds and tests as part of your GitHub workflow.
Microsoft Azure Pipelines: Configure a CI/CD pipeline for any Azure application using your preferred language and framework as part of your GitHub workflow in a few simple steps.
Better JIRA integration: The improved integration allows software teams to connect their code on GitHub.com to their projects on JIRA Software Cloud. The new app updates JIRA with data from GitHub, providing your team with visibility into the status of your work.
Slack app for GitHub: The updated slack app brings GitHub activity right into your channels—keeping your teams up-to-date and productive. Along with the new app, we released some improvements, such as slash commands and private link previews.
GitHub extension for Visual Studio: Available for both GitHub.com and GitHub Enterprise, you can fork and customize GitHub for Visual Studio Code until it’s everything you want it to be.
GitHub for Unity: The new Unity package provides Unity game developers with the benefits of source control and GitHub without having to switch to the command line.
Checks API: Instead of pass/fail build statuses, your integrations can now report richer results, annotate code with detailed information, and kick off reruns—all within the GitHub user interface.
GitHub Experiments: We launched Experiments—a collection of demonstrations highlighting our most exciting research projects and ideas.
GitHub Desktop 1.1-1.5 releases: With five releases in 2018, GitHub Desktop is improving fast. With this year’s improvements you can compare branches, get notified when the default branch has updates to pull into your branch, compare conflicts before merging, and initiate a merge in the branch dropdown. Watch for our 1.6 release in early 2019.

Security

The security challenges that underpin software today are community problems. Developers and organizations have to protect their projects and businesses while staying vigilant and current on new security threats. Here are some of the notable 2018 ships that will help keep your code safe.

New improvements and best practices for account security and recoverability: In July we released new improvements meant to keep software development happening on GitHub safer.
Security vulnerability alerts available for Python, Java and .NET: Our security vulnerability alerts now support Java and .NET (in addition to existing support for JavaScript, Ruby, and Python). With security vulnerability alerts, organization owners and repository admins receive a notification when a known vulnerability enters a codebase.
Token scanning: Ensure your tokens and keys are never accidentally committed and exposed in a public repository. We scan public repositories to search for known token formats. If we find a token, we alert the provider who will validate it and contact the account owner to issue a new token.
Security Advisory API: To power GitHub security features, we aggregate and validate security feeds and monitor dependency upgrades across millions of projects. With the new API, this data is at your fingertips and ready to be integrated into the tools and services you already use.

Learning

Our goal is to lower the barrier to entry for anyone who wants to learn to code. GitHub Education had a big 2018 with product and program improvements to make it easier for student developers to get the real-world experience they need to build great software—and lead the next generation of software developers.

Classroom Assistant: We launched Classroom Assistant to allow educators to easily download all the repositories in their course. It’s a cross-platform desktop application, available for Windows, Mac, and Linux.
GitHub Education: GitHub Education helps students, teachers, and schools access the tools and events they need to shape the next generation of software development.
Student Developer Pack: The Student Developer Pack provides students with access to the best real-world tools so they can learn to code by doing. Unlike other free student tools in the industry, GitHub does not require a school email address to get the Student Developer Pack, which lowers the barrier to entry for millions of new developers worldwide. In 2018 we made the pack even better with the addition of Algolia, Heroku, GitKraken Glo, and JetBrains.

In 2019 we’re going to keep listening and keep shipping. We’re going to continue to build great products while maintaining our commitment to supporting developers in their choice of any language, license, tool, platform, or cloud. Thank you to all 31 million of you—we can’t wait to see what you build next.

GitHubがSOC 1、SOC 2に準拠しました

2018-12-20T00:00:00+00:00

GitHubでは、データの安全性を確保し、開発者の生産性を高め、チームが問題の解決に集中できるよう、セキュリティのベストプラクティスに投資しています。このたび、GitHub Business CloudがAICPA Service Organization Controls（SOC）2タイプ1、および、SOC 1タイプ1コンプライアンスを取得しました。あわせて、国際的な基準であるIAASB内の2つの基準、ISAE 3000およびISAE 3402を取得しました。

現在GitHub Business Cloudを使用しており、これら証明書が必要な場合は、GitHubサポートに依頼することでこれらの監査レポートのコピーを入手できます。

セキュリティを重視した開発

GitHubはこれら基準に準拠していることが証明できたことをうれしく思います。セキュリティ対策には継続的な努力が必要です。GitHubのセキュリティチームは、世界中のエンジニアにとって最高のソフトウェア開発プラットフォームを提供することに常に注力しています。

SOC / ISAEレポートや、最近取得したFedRAMP Tailored LiSaaS ATO、Cloud Security Alliance CAIQは、GitHub.com上で取り扱うデータが安全であることを証明する監査レポートです。

GitHubは継続してセキュリティを強化し、SOC 1およびSOC 2タイプ2準拠の証明も6ヶ月以内に取得する予定です。

SOCとはなにか？

「SOC for Service Organizations」は、企業におけるセキュリティ監査に利用される保証報告書です。これらの報告書は、GitHubのようなクラウドサービスを利用する際、そのサービスのセキュリティレベルを評価するのに役立ちます。

SOC 2は、米国においてSaaS（Software-as-a-Service）に対するセキュリティコンプライアンスの代表的な基準です。 SOC 2に準拠するため、SaaS提供企業は顧客データを安全に保護することを始めとする、厳格な情報セキュリティ方針と手順を確立し、それらを実行する必要があります。

SOC 1は、SaaS提供企業が保有する顧客の財務データに関するシステムやプロセスが、セキュリティコンプライアンスに準拠していることを証明します。

ISAE3402およびISAE3000の内容はそれぞれSOC1、SOC2タイプ1に包含されています。これらコンプライアンスに準拠することで、国際的に認められている監査基準に合致したセキュリティ対策を実施していることを証明できます。

2018年のSOCレポートにはGitHubがAICPAガイドラインの基準に準拠していることが記載されています。

セキュリティはお客様にとって最重要事項であるため、GitHubは必要なセキュリティ対策を行いSOCとISAEに準拠しました。これにより、GitHubにおいて、論理および物理アクセス管理、データの格納と復元、暗号化、変更管理、ベンダー管理、インシデントに対する管理・検出・対応、セキュリティとプライバシーに関するトレーニング、組織管理、社員のシステム権限レベルなどが、ポリシーに従って効果的に運用されていることが証明されました。

GitHubにおけるセキュリティに対しての詳細はこちらのWebサイトhttps://github.com/securityで確認できます。

GitHub for Unity adds support for GitHub Enterprise

2018-12-19T10:45:00+00:00

It’s been over six months since we introduced GitHub for Unity 1.0, and we’ve been busy. Since launch, we’ve continued to improve the extension and fix bugs, focusing on maintenance and providing an overall smoother experience.

GitHub Enterprise support

The GitHub for Unity team received multiple requests to support GitHub Enterprise. Most recently, a team wanted to use the Unity plugin for their gaming engine but needed Enterprise support. GitHub Engineer @stanleygoldman addressed the request and shortly after, we were able to release a beta for customers to use and share feedback on.

In this release, GitHub for Unity version 1.2.0 officially supports GitHub Enterprise. Now, even more developers will be able to use the GitHub for Unity extension.

What’s next for GitHub for Unity

We’re a small team. We’re still trying to figure out what our impact should be and what work we should focus on. In 2019, we’re excited to see what’s in store for GitHub for Unity—and we’d love to hear your thoughts.

If you have questions, feedback, or want to get involved in building the GitHub for Unity extension, reach out to us in the project repository or on Twitter. Or see what we’ve been up to—try GitHub for Unity.

Download all of your GitHub data

2018-12-19T09:45:00+00:00

Your trust is our first priority. That’s why we’re making it easy to get all of the data connected to your profile, whenever you need it. Now you can better understand what information we store, so you can make informed choices about how you use GitHub.

How it works

Follow these steps to request an archive of your data:

Visit your account settings page.
Click “Start export” in the “Export account data” section. You will receive an email when the export is ready.
Click the link in the email to download the archive.

The archive will contain your profile data, plan, and any email addresses connected with your account in addition to the issues, pull requests, comments, reviews, releases, projects, events, attachments, milestones, and settings for each of your repositories—along with basic information about the users who have interacted with them.

Since the information is exported in a machine-readable format (Git and JSON), the archive allows you to back up your data offline, or move it to another service altogether. After all, it’s your data.

Archives remain available for seven days or until you choose to delete them. If you want more control over what information is exported, or if you want to export an organization’s information, use the Migration API.

Learn more about archiving your data

Octoverse 2018 (2018年10月時点の統計情報) ーオープンソースプロジェクト

2018-12-19T00:00:00+00:00

この記事はGitHubの活動、オープンソースコミュニティの動向、さらにGitHubのデータサイエンスチームによる洞察によって作成された2018年のOctoverse(オクトバース)レポートに基づいたシリーズの一部です。

2018年は過去6年間と比較して新しいユーザーが増え、1億以上のリポジトリが作られました。これらはすべて、オープンソースコミュニティによるものです。多くの開発者がGitHub上で趣味ということだけでなく、仕事として必要になるプロジェクトに取り組み、コーディングの経験レベルにかかわらず共同作業をしてきました。本ブログでは、今年最も活発な活動が行われたオープンソースプロジェクトを紹介します。

これらデータは、2017年12月10日から2018年12月9日の間において、OSSプロジェクトが公開されてから最初の28日間に付けれたスターの数とコントリビューションの数によってランク付けされています。

2018年の上位プロジェクト

2018年に公開された上位OSSプロジェクトは、コーディングを学習するためのものから仕事で利用できるツール、また、趣味で行うようなサイドプロジェクトから仕事において生産性を上げるためのものまで、幅広いプロジェクトが公開されました。

初めてコーディングする初心者や、新しい言語を学ぶためのクイックチュートリアルである、trekhleb/javascript-algorithmsやleonardomso/33-js、30-seconds/30-seconds-of-codeなどに多くのスターがつきました。

Hacktoberfestにも多くのコントリビューションが集まり、Hacktoberfest-2018/Hello-worldやOmkar-Ajnadkar/Hello-Worldに対してさまざまな言語でのHello Worldプログラムが追加されました。その中には、VAR-solutions/Algorithmsのような非常に複雑な言語も含まれました。

また、wangshub/wechat_jump_gameのようなゲームのプロジェクトにも多くのコントリビューションが集まり、kelseyhightower/nocodeのようなプロジェクトでは多くの笑いが巻き起こりました。 felixrieseberg/windows95とMicrosoft/MS-DOSに対して懐かしさを覚える開発者が多くいたようで、多くのスターやコントリビューションが集まりました

新しく開設されたOSSプロジェクトには、TypeScript開発のためのdenoland/deno、ゲームをLinuxに移植するValveSoftware/Proton、画像認識アルゴリズムの研究をサポートするfacebookresearch/Detectronなどもありました。

多くのスターがついたOSSプロジェクト

以下は、開設されて28日以内に多くのスターが付いたOSSプロジェクトをまとめたグラフです。

コントリビューションが多かったOSSプロジェクト

以下は、2017年12月11日から2018年12月10日までのあいだで、開設されて28日以内に多くのコントリビューションがあったOSSプロジェクトをまとめたグラフです。

上位OSSプロジェクトのトピック

以下のチャートは、2018年に作成されたOSSプロジェクトで、2017年と比べて大きな増加がみられた、プログラミング言語以外のトピックのランキングです。dotnetが3位にランキングしていることで、OSSで多くのWindowsアプリが開発されていることがわかります。Octoverseの「上位プログラミング言語」統計では、JavaScriptは新しいプロジェクトで最も人気のある言語でした。それと関連し、JavaScript開発と関連性が高いnodejsやreact、vueなどが2018年の上位プロジェクトにランクしています。また、機械学習はGitHubでも人気のあるプロジェクトで、machine-learningのタグが付いた新しいOSSプロジェクトは増加傾向にあります。

nodejs
react
dotnet
docker
android
machine-learning
api
ios
cli
vue

仕事のための開発でも、趣味の一環として新しい技術を試しているだけでも、ビギナーレベルの開発者と経験豊富な開発者が、区別なくOSSコミュニティでコラボレーションをしながら、革新的なプロジェクトに取り組める環境を提供できることを嬉しく思います。今後も、これらコラボレーションを通してソフトウェア開発に対する新しいアイデアが生まれ、ともに学び合える場所を提供していきたいと思います。

GitHub has SOC for Service Organizations reports

2018-12-17T00:00:00+00:00

At GitHub, we invest in security best practices to make sure your data stays safe, your developers are productive, and your team can focus on solving problems. Today we’re excited to share even more progress: GitHub has achieved the AICPA Service Organization Controls (SOC) 2 Type 1 and SOC 1 Type 1 compliance for GitHub Business Cloud. And for our international customers, we’ve also achieved compliance with two IAASB International Standards on Assurance Engagements: the ISAE 3000 and ISAE 3402.

If you’re currently using GitHub Business Cloud, you can request a copy of these audit reports through your Support team.

Our focus on your security

We’re proud of this milestone, but security is an ongoing effort. Our information security program is continually focused on providing the best software development platform for engineers around the world. The SOC/ISAE reports, our recently acquired FedRAMP Tailored LiSaaS ATO, and the Cloud Security Alliance CAIQ are all ways we’ve committed to providing GitHub Business Cloud customers and their auditors with appropriate levels of assurance that their data is safe and secure on GitHub.com. As we work to improve our security posture, we’re also committed to issuing both SOC 1 and SOC 2 Type 2 assurance reports in six months and will continue on that cadence.

What is SOC?

SOC for Service Organizations are assurance reports on the internal controls of service organizations. These reports help people looking to use an outsourced service like GitHub assess and address the associated risks.

SOC 2 is considered the gold standard for security compliance for software-as-a-service (SaaS) companies in the US. SOC 2 requires companies to establish and follow strict information security policies and procedures, encompassing the secure protection of customer data.

SOC 1 attests to the compliance of an organization’s security controls over systems and processes that have material relevance to the service organization’s customers financial statements.

ISAE 3402 and ISAE 3000 assurance opinions are included in the SOC 1 and SOC 2 Type 1 reports, respectively. These enable us to represent our commitment to Security under an internationally recognized audit standard.

Our 2018 SOC reports provide assurance that GitHub is complying with the standards of the AICPA guidelines. To achieve compliance with the SOC and ISAE requirements, GitHub has implemented and adheres to common controls over security, the ones that matters most to our customers. The audit demonstrates that these controls are operating effectively and that they cover operational practices like logical and physical access management, data storage and recovery, encryption, change management, vendor management, incident management, detection and response, security and privacy awareness training, organizational management, and personnel security.

To learn more about security and compliance at GitHub, visit https://github.com/security.

Introducing check runs and annotations

2018-12-14T16:50:00+00:00

In the latest release of GitHub for Visual Studio, the Editor Tools team has improved the pull request experience with check runs and annotations. Seeing annotations inline for a check run when reviewing a pull request provides the reviewer with more information in order to perform a more thorough review of their code.

Annotations in pull requests

The GitHub for Visual Studio team worked on a release to provide you with more information when reviewing pull requests. This past August, @stanleygoldman implemented checks and statuses so that pull requests show a status of pending, passing, or failing for each check. Taking it a step further, checks can be configured to run against changed files in a pull request to provide annotations and show details about the code including errors, warnings, and general information.

How it works

When a check run application is configured for a repository, annotations appear on each pull request if a certain condition is met. Looking at the list of changed files, it’s easy to see which files have annotations. Here’s an example where the indicator is beside the file name (represented by a symbol), and the number of annotations is linked.

When you click on the link, the file opens for you to view more details about the annotations. In the margin of the diff, lines with check run annotations are identified with a different color: red for errors, yellow for warnings, and blue for information.

When inline comments are on the same line as an annotation, two separate indicators appear: a diamond symbol for the annotations and a circle for comments. When clicking on the marker, both the annotation and comment are displayed.

Applications of annotations

GitHub applications can be integrated with checks to list annotations about lines of code that have been changed in pull requests. Here are a few awesome GitHub applications that can show annotations through check runs:

Build Cross Check creates checks and surfaces warnings, errors, and additional information.
Yamburger finds syntax errors in YAML files changed in pull requests.
Kubevalidator validates Kubernetes YAML files changed in GitHub Pull requests against a community-maintained set of schemas using kubeval.
Prosebot listens for changes to Markdown files and runs various checks against them to provide feedback on English spelling, prose, and inclusive verbiage.
Linter-Alex ensures your writing is sensitive and considerate before you merge your pull requests.

You can use existing GitHub applications to provide code annotations, or you can build your own. This option provides the flexibility to choose the exact annotations you want to show in your project.

Try it out

Try the new check run annotations feature, and let us know what you think!

If you’re curious see what else we worked on, check out the latest release notes. As always, you can reach out to us in our repository or on Twitter.

The State of the Octoverse: new open source projects in 2018

2018-12-13T00:00:00+00:00

This article is part of a series based on our 2018 State of the Octoverse report—trends and insights into GitHub activity, the open source community, and more from the GitHub Data Science Team.

In 2018 alone, we saw more new users than in our first six years combined, and we celebrated hosting over 100 million repositories. All of this growth is thanks to the open source community. Together, you’ve built and collaborated on a broad spectrum of projects, from hobbies to professional tools and across varying developer experience levels. As the year comes to a close, we wanted our final Octoverse report of 2018 to highlight some of your most active new open source projects of the year.

To look back at your projects, we pulled data from December 10, 2017 to December 9, 2018. We pulled the top projects open sourced in 2018 by the number of stars the project received in its first 28 days being public and by the number of unique contributors to the project in the first 28 days being public.

Top projects of 2018

The top projects open sourced in 2018 run the gamut from learning to code to tools for professionals, from side projects for fun to projects for getting work done.

For those new to code, or new to a coding language, you starred projects with coding examples, like trekhleb/javascript-algorithms and leonardomso/33-js-concepts, along with quick tutorials like 30-seconds/30-seconds-of-code.

You also contributed to projects for Hacktoberfest, adding Hello World programs in a variety of languages to Hacktoberfest-2018/Hello-world and Omkar-Ajnadkar/Hello-World, or even more complex algorithm examples to VAR-solutions/Algorithms.

You also had a lot of fun, starring and contributing to gaming projects like wangshub/wechat_jump_game, and had some laughs with projects like kelseyhightower/nocode. felixrieseberg/windows95 and Microsoft/MS-DOS sparked some nostalgia, quickly attracting your stars and contributions.

New open source projects also helped you get work done with tools like denoland/deno for developing in TypeScript, ValveSoftware/Proton for porting games to Linux, and facebookresearch/Detectron to support research in image recognition algorithms.

Based on stars

We pulled the top 10 projects open sourced in 2018 based on the total number of stars they accumulated in their first 28 days on GitHub.

Based on contributors

We pulled the top 10 projects open sourced in the 365 days prior to December 10, 2018 based on the total number of contributors to the project in their first 28 days on GitHub.

The GitHub Blog

Highlights for Game Off 2018

Overall Winner: Singularity

Best Gameplay - MIX UP

Best Graphics - Fire of Kala

Best Audio - Home

Innovation - Lens

Theme Interpretation - Blow the Shark Down

Staff picks

D-Tac

GRIMCURSE

Three Course Meal

Jack of Spades

Monster Pong

Machinaria

Lettris

Ouro

Blank Bit

Until next year!

Release Radar · November 2018

eDEX-UI i 1.0

HTTPie 1.0

HTTP Prompt 1.0

SVGR 4.0

svgedit 4.0

buku 4.0

Pelican 4.0

Filament 1.0

Alda 1.0

Kaku 2.0

CMS.js 2.0

A few of our favorite 2018 ships

Collaboration

Business

Platform

Security

Learning

GitHubがSOC 1、SOC 2に準拠しました

セキュリティを重視した開発

SOCとはなにか？

GitHub for Unity adds support for GitHub Enterprise

GitHub Enterprise support

What’s next for GitHub for Unity

Download all of your GitHub data

How it works

Octoverse 2018 (2018年10月時点の統計情報) ー オープンソースプロジェクト

2018年の上位プロジェクト

多くのスターがついたOSSプロジェクト

コントリビューションが多かったOSSプロジェクト

上位OSSプロジェクトのトピック

GitHub has SOC for Service Organizations reports

Our focus on your security

What is SOC?

Introducing check runs and annotations

Annotations in pull requests

How it works

Applications of annotations

Try it out

The State of the Octoverse: new open source projects in 2018

Top projects of 2018

Based on stars

Based on contributors

Top topics for new open source projects

Octoverse 2018 (2018年10月時点の統計情報) ーオープンソースプロジェクト