CINXE.COM
GitHub Security Lab | Securing open source software, together.
<!DOCTYPE html> <html lang="en"> <head> <!-- META DATA --> <meta charset="utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <link rel="preload" href="/assets/css/index.css" as="style"> <link rel="preload" href="/assets/js/main.js" as="script"> <!--[if IE]><meta http-equiv="cleartype" content="on" /><![endif]--> <link rel="canonical" href="https://securitylab.github.com/"> <link rel="alternate" type="application/rss+xml" title="GitHub Security Lab" href="/feed.xml"> <link rel="stylesheet" media="screen" href="/assets/css/index.css" /> <script async src="https://js.maxmind.com/js/apis/geoip2/v2.1/geoip2.js"></script> <script src="/assets/js/jquery.js"></script> <link id="favicon" rel="shortcut icon" type="image/ico" href="/assets/img/favicons/favicon.png" /> <link rel="apple-touch-icon" href="/assets/img/favicons/apple-touch-icon.png" /> <link rel="icon" href="/assets/img/favicons/android-favicon.png"> <!-- Begin Jekyll SEO tag v2.8.0 --> <title>GitHub Security Lab | Securing open source software, together.</title> <meta name="generator" content="Jekyll v4.1.1" /> <meta property="og:title" content="GitHub Security Lab" /> <meta property="og:locale" content="en_US" /> <meta name="description" content="Securing open source software, together." /> <meta property="og:description" content="Securing open source software, together." /> <link rel="canonical" href="https://securitylab.github.com/" /> <meta property="og:url" content="https://securitylab.github.com/" /> <meta property="og:site_name" content="GitHub Security Lab" /> <meta property="og:image" content="https://securitylab.github.com/assets/img/social-card.png" /> <meta property="og:type" content="website" /> <meta name="twitter:card" content="summary_large_image" /> <meta property="twitter:image" content="https://securitylab.github.com/assets/img/social-card.png" /> <meta property="twitter:title" content="GitHub Security Lab" /> <meta name="twitter:site" content="@GHSecurityLab" /> <script type="application/ld+json"> {"@context":"https://schema.org","@type":"WebSite","description":"Securing open source software, together.","headline":"GitHub Security Lab","image":"https://securitylab.github.com/assets/img/social-card.png","name":"GitHub Security Lab","url":"https://securitylab.github.com/"}</script> <!-- End Jekyll SEO tag --> <meta name="ha-url" content="https://collector.githubapp.com/securitylab-website/collect"> <script src="https://analytics.githubassets.com/hydro-marketing.min.js"></script> </head> <body class="no-js page-home"> <a class="skip-to-content" href="#content">skip to content</a> <div id="site-navigation-container" class="site-navigation-container position-fixed top-0 width-full color-bg-transparent" > <div className="position-relative site-navigation-container--background hide-sm hide-md" > <nav class="site-navigation nav d-block"> <div class="container-xl py-2 d-none d-lg-flex flex-items-center flex-justify-between gap-0" > <a role="tab" title="Github" class="nav-logo" href="https://github.com" target="_blank" > <svg aria-hidden="true" role="img" class="nav-back-arrow position-absolute" viewBox="0 0 24 24" width="32" height="32" fill="currentColor" style=" display: inline-block; user-select: none; vertical-align: text-bottom; overflow: visible; " > <path fill-rule="evenodd" d="M15.28 5.22a.75.75 0 00-1.06 0l-6.25 6.25a.75.75 0 000 1.06l6.25 6.25a.75.75 0 101.06-1.06L9.56 12l5.72-5.72a.75.75 0 000-1.06z" ></path> </svg> <svg height="32" class="octicon octicon-mark-github mr-2" viewBox="0 0 16 16" version="1.1" width="32" aria-hidden="true" > <path fill-rule="evenodd" d="M8 0C3.58 0 0 3.58 0 8c0 3.54 2.29 6.53 5.47 7.59.4.07.55-.17.55-.38 0-.19-.01-.82-.01-1.49-2.01.37-2.53-.49-2.69-.94-.09-.23-.48-.94-.82-1.13-.28-.15-.68-.52-.01-.53.63-.01 1.08.58 1.23.82.72 1.21 1.87.87 2.33.66.07-.52.28-.87.51-1.07-1.78-.2-3.64-.89-3.64-3.95 0-.87.31-1.59.82-2.15-.08-.2-.36-1.02.08-2.12 0 0 .67-.21 2.2.82.64-.18 1.32-.27 2-.27.68 0 1.36.09 2 .27 1.53-1.04 2.2-.82 2.2-.82.44 1.1.16 1.92.08 2.12.51.56.82 1.27.82 2.15 0 3.07-1.87 3.75-3.65 3.95.29.25.54.73.54 1.48 0 1.07-.01 1.93-.01 2.2 0 .21.15.46.55.38A8.013 8.013 0 0 0 16 8c0-4.42-3.58-8-8-8z" ></path> </svg> </a> <span class="Slash-item"> / </span> <a aria-current="page" role="tab" title="Security Lab" class="nav-item nav-item--logo" href="/" >Security Lab</a > <div class="nav-body flex-auto flex-justify-start hide-sm hide-md" role="tablist" > <a role="tab" title="Research" class="nav-item" href="https://github.blog/tag/github-security-lab/" target="_blank" >Research</a > <a role="tab" title="Advisories" class="nav-item" href="/advisories/" >Advisories</a > <a role="tab" title="CodeQL Wall of Fame" class="nav-item" href="/codeql-wall-of-fame/" >CodeQL Wall of Fame</a > <button aria-label="Menu" aria-expanded="false" class="nav-item nav-item-button js-dropdown-menu-trigger" > Resources </button> <a role="tab" title="Events" class="nav-item" href="/events/" >Events</a > </div> <a href="/get-involved/" class="btn-get-involved hide-sm hide-md" ><span>Get Involved</span></a > </div> </nav> </div> <div class="navigation-dropdown left-0 width-full position-absolute color-bg-dark py-6" > <ul class="container-xl py-5 site-navigation__dropdown"> <li class="pb-4 dropdown-title col-4">Resources</li> <li class="dropdown-nav-item col-4 py-2"> <a role="tab" title="Home" class=" " href="/open-source" >Open Source Community</a > </li> <li class="dropdown-nav-item col-4 py-2"> <a role="tab" title="Home" class="" href="/enterprise" >Enterprise</a > </li> </ul> </div> </div> <div class="mobile-navbar hide-lg hide-xl d-flex flex-items-center flex-justify-start" > <a role="tab" title="Github" class="nav-logo" href="https://github.com" target="_blank" > <svg height="32" class="octicon octicon-mark-github mr-2" viewBox="0 0 16 16" version="1.1" width="32" aria-hidden="true" > <path fill-rule="evenodd" d="M8 0C3.58 0 0 3.58 0 8c0 3.54 2.29 6.53 5.47 7.59.4.07.55-.17.55-.38 0-.19-.01-.82-.01-1.49-2.01.37-2.53-.49-2.69-.94-.09-.23-.48-.94-.82-1.13-.28-.15-.68-.52-.01-.53.63-.01 1.08.58 1.23.82.72 1.21 1.87.87 2.33.66.07-.52.28-.87.51-1.07-1.78-.2-3.64-.89-3.64-3.95 0-.87.31-1.59.82-2.15-.08-.2-.36-1.02.08-2.12 0 0 .67-.21 2.2.82.64-.18 1.32-.27 2-.27.68 0 1.36.09 2 .27 1.53-1.04 2.2-.82 2.2-.82.44 1.1.16 1.92.08 2.12.51.56.82 1.27.82 2.15 0 3.07-1.87 3.75-3.65 3.95.29.25.54.73.54 1.48 0 1.07-.01 1.93-.01 2.2 0 .21.15.46.55.38A8.013 8.013 0 0 0 16 8c0-4.42-3.58-8-8-8z" ></path> </svg> </a> <span class="Slash-item"> / </span> <a aria-current="page" role="tab" title="Security Lab" class="top-nav-item nav-item nav-item--logo" href="/" >Security Lab</a > <button aria-label="Menu" aria-expanded="false" class="sc-VigVT sc-jzJRlG nav-dropdown js-menu-trigger" > <svg class="caret-button" width="14" height="9" viewBox="0 0 14 9" fill="none" xmlns="http://www.w3.org/2000/svg" > <path fill-rule="evenodd" clip-rule="evenodd" d="M13.7803 0.71967C14.0732 1.01256 14.0732 1.48744 13.7803 1.78033L7.53033 8.03033C7.23744 8.32322 6.76256 8.32322 6.46967 8.03033L0.21967 1.78033C-0.0732231 1.48744 -0.0732231 1.01256 0.21967 0.71967C0.512563 0.426777 0.987437 0.426777 1.28033 0.71967L7 6.43934L12.7197 0.71967C13.0126 0.426777 13.4874 0.426777 13.7803 0.71967Z" fill="#24292F" /> </svg> </button> <script> document.addEventListener("DOMContentLoaded", function () { const toggleNavBtn = document.querySelector(".nav-dropdown"); const mobileNav = document.querySelector(".mobile-nav"); const caretIcon = document.querySelector(".caret-button"); const backdrop = document.querySelector(".mobile-nav-screen"); function toggleNavigation(event) { event.preventDefault(); const expanded = toggleNavBtn.getAttribute("aria-expanded") === "true"; toggleNavBtn.setAttribute("aria-expanded", !expanded); mobileNav.classList.toggle("expanded", !expanded); backdrop.classList.toggle("active", !expanded); } toggleNavBtn.addEventListener("click", toggleNavigation); toggleNavBtn.addEventListener("touchstart", toggleNavigation); backdrop.addEventListener("click", toggleNavigation); backdrop.addEventListener("touchstart", toggleNavigation); }); </script> </div> <div class="mobile-nav"> <div class=""> <a role="tab" title="Research" class="nav-item " href="https://github.blog/tag/github-security-lab/" >Research</a > <a role="tab" title="Advisories" class="nav-item " href="/advisories/" >Advisories</a > <a role="tab" title="CodeQL Wall of Fame" class="nav-item " href="/codeql-wall-of-fame/" >CodeQL Wall of Fame</a > <div class="nav-item resources"> <div class="nav-dropdown-item d-flex flex-justify-between flex-items-center" > <span>Resources</span> <svg class="mobile-caret" width="12" height="7" viewBox="0 0 12 7" fill="none" xmlns="http://www.w3.org/2000/svg" > <path fill-rule="evenodd" clip-rule="evenodd" d="M11.6502 0.266554C11.8943 0.510632 11.8943 0.90636 11.6502 1.15044L6.44186 6.35877C6.19778 6.60285 5.80205 6.60285 5.55798 6.35877L0.349644 1.15044C0.105566 0.90636 0.105566 0.510632 0.349644 0.266554C0.593721 0.0224767 0.98945 0.0224767 1.23353 0.266554L5.99992 5.03295L10.7663 0.266554C11.0104 0.0224767 11.4061 0.0224767 11.6502 0.266554Z" fill="white" /> </svg> </div> <div class="sub-menu"> <a role="tab" title="Open Source Community" class="nav-inner-item " href="/open-source" >Open Source Community</a > <a role="tab" title="Enterprise" class="nav-inner-item " href="/enterprise" >Enterprise</a > </div> </div> <a role="tab" title="Events" class="nav-item " href="/events/" >Events</a > <a role="tab" title="Events" class="nav-item " href="/get-involved/" >Get Involved</a > </div> <script> document.addEventListener("DOMContentLoaded", function () { const resources = document.querySelector(".nav-item.resources"); const caret = resources.querySelector(".mobile-caret"); const subMenu = resources.querySelector(".sub-menu"); resources.addEventListener("click", function () { resources.classList.toggle("active"); if (resources.classList.contains("active")) { // Force reflow subMenu.style.maxHeight = subMenu.scrollHeight + "px"; subMenu.style.opacity = 1; } else { // Force reflow subMenu.style.maxHeight = "0"; subMenu.style.opacity = 0; } }); }); </script> </div> <span class="mobile-nav-screen js-menu-trigger"></span> <span class="dropdown-nav-screen js-dropdown-menu-trigger"></span> <main id="content" class="main" aria-label="Content"> <div class="text-mktg home-sl"> <section class="home-hero mt-md-76 px-0 px-md-6 pb-5 pb-md-10"> <div class="container-xl home-hero-logo"> <img src="/assets/img/marketing/home-hero.png" alt="" width="100%" height="100%" class="home-background-img d-block hide-sm hide-md" /> <img src="/assets/img/marketing/mobile-hero.png" alt="" width="100%" height="100%" class="home-background-img hide-lg hide-xl" /> </div> <div class="container-xl home-hero-banner d-flex flex-column flex-justify-center align-items-center flex-items-center" > <img src="/assets/img/marketing/hero-label.png" alt="" width="168" height="26" class="hero-label-btn icon" /> <h1 class="home-hero-banner-text text-center font-mona"> Securing open source software, together </h1> <div class="home-hero-banner-text-details py-md-4 text-center px-0 px-md-6 font-mona" > We are a team of security experts who cultivate a collaborative community where developers and security professionals come together to secure open source software. </div> <a href="/get-involved/" class="btn-animated btn-hero-get-involved mt-3" > <span class="btn-hero-get-involved-content font-mona"> <span>Get Involved</span> <span> <svg aria-hidden="true" role="presentation" xmlns="http://www.w3.org/2000/svg" class="arrow-symbol" width="16" height="16" viewBox="0 0 16 16" fill="none" > <path class="path-default" fill="currentColor" d="M7.28033 3.21967C6.98744 2.92678 6.51256 2.92678 6.21967 3.21967C5.92678 3.51256 5.92678 3.98744 6.21967 4.28033L7.28033 3.21967ZM11 8L11.5303 8.53033C11.8232 8.23744 11.8232 7.76256 11.5303 7.46967L11 8ZM6.21967 11.7197C5.92678 12.0126 5.92678 12.4874 6.21967 12.7803C6.51256 13.0732 6.98744 13.0732 7.28033 12.7803L6.21967 11.7197ZM6.21967 4.28033L10.4697 8.53033L11.5303 7.46967L7.28033 3.21967L6.21967 4.28033ZM10.4697 7.46967L6.21967 11.7197L7.28033 12.7803L11.5303 8.53033L10.4697 7.46967Z" ></path> <path class="path-hover" stroke="currentColor" d="M1.75 8H11" strokeWidth="1.5" strokeLinecap="round" ></path></svg></span ></span> </a> </div> </section> <section class="mission-section py-8 py-md-10"> <img src="/assets/img/marketing/ball-mission-1.png" alt="" width="610" height="590" class="mission-ball-deco-top hide-sm" /> <img src="/assets/img/marketing/ball-mission-2.png" alt="" width="471" height="471" class="mission-ball-deco-bottom hide-sm" /> <img src="/assets/img/marketing/mobile-ball-mission-1.png" alt="" width="100%" height="100%" class="mobile-mission-ball-deco-top hide-lg hide-xl" /> <img src="/assets/img/marketing/mobile-ball-mission-2.png" alt="" width="320" height="320" class="mobile-mission-ball-deco-bottom hide-lg hide-xl" /> <div class="container-xl mission-section-wrapper"> <div class="mission-card"> <div class="mission-tag font-mona">Our Mission</div> <h2 class="mission-statement-header font-mona"> Enhance security by fostering global collaboration. </h2> <div class="mission-statement-content font-mona"> Contributions from maintainers, developers, and security researchers around the world push us forward, making the open source software a better place. </div> </div> </div> </section> <section class="container-xl security-research-section pt-8 pb-8 pt-md-10 pb-md-10" > <div class="security-research-wrapper"> <div class="security-research-tag font-mona">Security Research</div> <h2 class="security-research-header mt-3 font-mona"> We do the hard work, you can use it. </h2> <p class="security-research-content mb-6 mt-3 mb-md-6 mt-md-4 font-mona"> Dive into security research on open-source projects to explore new and emerging threats, and learn how to mitigate them so that you can make your own software more secure. </p> <a href="https://github.blog/tag/github-security-lab/" class="btn-animated btn-read-research font-alliance" target="_blank" ><span class="btn-hero-get-involved-content"> <span>Read the Research</span> <span> <svg aria-hidden="true" role="presentation" xmlns="http://www.w3.org/2000/svg" class="arrow-symbol" width="16" height="16" viewBox="0 0 16 16" fill="none" > <path class="path-default" fill="currentColor" d="M7.28033 3.21967C6.98744 2.92678 6.51256 2.92678 6.21967 3.21967C5.92678 3.51256 5.92678 3.98744 6.21967 4.28033L7.28033 3.21967ZM11 8L11.5303 8.53033C11.8232 8.23744 11.8232 7.76256 11.5303 7.46967L11 8ZM6.21967 11.7197C5.92678 12.0126 5.92678 12.4874 6.21967 12.7803C6.51256 13.0732 6.98744 13.0732 7.28033 12.7803L6.21967 11.7197ZM6.21967 4.28033L10.4697 8.53033L11.5303 7.46967L7.28033 3.21967L6.21967 4.28033ZM10.4697 7.46967L6.21967 11.7197L7.28033 12.7803L11.5303 8.53033L10.4697 7.46967Z" ></path> <path class="path-hover" stroke="currentColor" d="M1.75 8H11" strokeWidth="1.5" strokeLinecap="round" ></path></svg></span ></span> </a> </div> <img src="/assets/img/marketing/labtocat.png" alt="" class="security-labtocat" /> </section> <section class="code-ql-section"> <div class="container-xl code-ql-wrapper"> <div class="lvd"> <div class="vulnerabilities-count"> <svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg" > <path fill-rule="evenodd" clip-rule="evenodd" d="M17.0667 0.266126C16.3729 0.0441048 15.6271 0.0441036 14.9333 0.266124L4.43328 3.62612C2.98366 4.09 2 5.43756 2 6.9596V13.9997C2 17.1318 2.63846 20.3646 4.6064 23.364C6.57262 26.361 9.77672 28.9892 14.6702 31.0734C15.5182 31.4346 16.4818 31.4346 17.3299 31.0734C22.2232 28.9892 25.4274 26.361 27.3936 23.364C29.3616 20.3646 30 17.1318 30 13.9997V6.9596C30 5.43756 29.0164 4.09 27.5668 3.62612L17.0667 0.266126ZM15.8476 3.1234C15.9467 3.09168 16.0533 3.09168 16.1524 3.1234L26.6524 6.4834C26.8594 6.54966 27 6.74218 27 6.9596V13.9997C27 16.7164 26.4506 19.3324 24.8852 21.7184C23.3182 24.107 20.6432 26.4014 16.1543 28.3134C16.0573 28.3546 15.9427 28.3546 15.8457 28.3134C11.3568 26.4014 8.68188 24.107 7.11474 21.7184C5.5493 19.3324 5 16.7164 5 13.9997V6.9596C5 6.74218 5.14052 6.54966 5.34762 6.4834L15.8476 3.1234ZM22.5606 12.5604C23.1464 11.9746 23.1464 11.0249 22.5606 10.4391C21.9748 9.8533 21.0252 9.8533 20.4394 10.4391L14.5 16.3784L12.5607 14.4391C11.9749 13.8533 11.0251 13.8533 10.4393 14.4391C9.85356 15.0249 9.85356 15.9746 10.4393 16.5604L13.4393 19.5604C14.0251 20.1462 14.9749 20.1462 15.5607 19.5604L22.5606 12.5604Z" fill="#C8FF80" /> </svg> <div class="vf-count mt-3 mt-md-8 mb-1 font-mono">1022</div> <div class="vf-count-text mb-1 font-mona">vulnerabilities found</div> <div class="slr-text font-mona">by Security Lab researchers</div> <div class="cve-credited"> <span class="cve-count font-mono">711</span> <span class="cve-count-text font-mona"> CVEs credited</span> </div> <div class="see-more-footer mt-md-8"> <a class="btn-animated link-animated d-flex flex-items-center align-items-center flex-justify-start" href="/advisories/" > <span> <span class="underlined-text font-mona" >See all disclosures </span> <svg aria-hidden="true" role="presentation" xmlns="http://www.w3.org/2000/svg" class="arrow-symbol" width="16" height="16" viewBox="0 0 16 16" fill="none" > <path class="path-default" fill="currentColor" d="M7.28033 3.21967C6.98744 2.92678 6.51256 2.92678 6.21967 3.21967C5.92678 3.51256 5.92678 3.98744 6.21967 4.28033L7.28033 3.21967ZM11 8L11.5303 8.53033C11.8232 8.23744 11.8232 7.76256 11.5303 7.46967L11 8ZM6.21967 11.7197C5.92678 12.0126 5.92678 12.4874 6.21967 12.7803C6.51256 13.0732 6.98744 13.0732 7.28033 12.7803L6.21967 11.7197ZM6.21967 4.28033L10.4697 8.53033L11.5303 7.46967L7.28033 3.21967L6.21967 4.28033ZM10.4697 7.46967L6.21967 11.7197L7.28033 12.7803L11.5303 8.53033L10.4697 7.46967Z" ></path> <path class="path-hover" stroke="currentColor" d="M1.75 8H11" strokeWidth="1.5" strokeLinecap="round" ></path> </svg> </span> </a> </div> </div> <div class="vulnerabilities-list font-sf"> <p class="vulnerabilities-header p-3 m-0"> Latest vulnerabilities disclosed </p> <ul class="vulnerabilities-list-items"> <li class="disclosure Box-row d-flex flex-items-start condensed"> <div class="info"> <div class="title"> Code Injection in Angular JA’s Actions workflow</div> <div class="meta"> <a href="/advisories/GHSL-2024-338_Angular_JA/">GHSL-2024-338</a> • published <span class="js-date-ago" >2024/11/26 00:00:00</span > ago • Alvaro Munoz </div> </div> </li> <li class="disclosure Box-row d-flex flex-items-start condensed"> <div class="info"> <div class="title"> Cross Site Scripting (XSS) in palindrome checker from freeCodeCamp/demo-projects</div> <div class="meta"> <a href="/advisories/GHSL-2024-336_freeCodeCamp_demo-projects/">GHSL-2024-336</a> • published <span class="js-date-ago" >2024/11/26 00:00:00</span > ago • Sylwia Budzynska </div> </div> </li> <li class="disclosure Box-row d-flex flex-items-start condensed"> <div class="info"> <div class="title"> Poisoned Pipeline Execution (PPE) in AWS Karpenter Provider</div> <div class="meta"> <a href="/advisories/GHSL-2024-314_AWS_Karpenter_Provider/">GHSL-2024-314</a> • published <span class="js-date-ago" >2024/11/26 00:00:00</span > ago • Alvaro Munoz </div> </div> </li> <li class="disclosure Box-row d-flex flex-items-start condensed"> <div class="info"> <div class="title"> Poisoned Pipeline Execution (PPE) in Marimo</div> <div class="meta"> <a href="/advisories/GHSL-2024-313_Marimo/">GHSL-2024-313</a> • published <span class="js-date-ago" >2024/11/26 00:00:00</span > ago • Alvaro Munoz </div> </div> </li> <li class="disclosure Box-row d-flex flex-items-start condensed"> <div class="info"> <div class="title"> Information disclosure via PlexRipper’s open CORS policy - CVE-2024-49763</div> <div class="meta"> <a href="/advisories/GHSL-2024-305_PlexRipper/">GHSL-2024-305</a> • <a href="https://nvd.nist.gov/vuln/detail/CVE-2024-49763" target="_blank" rel="noopener nofollow" >CVE-2024-49763</a > • published <span class="js-date-ago" >2024/11/26 00:00:00</span > ago • Kevin Stubbings </div> </div> </li> </ul> </div> </div> </div> </section> <section class="join-us-section"> <div class="container-xl join-us-wrapper"> <img src="/assets/img/marketing/mona-shield.png" alt="" class="join-background-img hide-sm hide-md" /> <img src="/assets/img/marketing/mona-shield-mobile.png" alt="" class="join-background-img hide-lg hide-xl" /> </div> <div class="join-us-content container-xl"> <div class="join-us-tag font-mona">CodeQL Wall of Fame</div> <h3 class="join-us-content-header my-3 font-mona"> Join us in our mission to improve open source security for all </h3> <p class="join-us-content-text mb-5 font-mona"> Have you used CodeQL’s variant analysis to find vulnerabilities on open source projects? Give your work the visibility it deserves by submitting your finding for the CodeQL Wall of Fame. </p> <a href="/codeql-wall-of-fame/" class="btn-animated btn-share mt-2 mt-md-4" ><span class="btn-share-content font-alliance"> <span>Share your work</span> <span ><svg aria-hidden="true" role="presentation" xmlns="http://www.w3.org/2000/svg" class="arrow-symbol" width="16" height="16" viewBox="0 0 16 16" fill="none" > <path class="path-default" fill="currentColor" d="M7.28033 3.21967C6.98744 2.92678 6.51256 2.92678 6.21967 3.21967C5.92678 3.51256 5.92678 3.98744 6.21967 4.28033L7.28033 3.21967ZM11 8L11.5303 8.53033C11.8232 8.23744 11.8232 7.76256 11.5303 7.46967L11 8ZM6.21967 11.7197C5.92678 12.0126 5.92678 12.4874 6.21967 12.7803C6.51256 13.0732 6.98744 13.0732 7.28033 12.7803L6.21967 11.7197ZM6.21967 4.28033L10.4697 8.53033L11.5303 7.46967L7.28033 3.21967L6.21967 4.28033ZM10.4697 7.46967L6.21967 11.7197L7.28033 12.7803L11.5303 8.53033L10.4697 7.46967Z" ></path> <path class="path-hover" stroke="currentColor" d="M1.75 8H11" strokeWidth="1.5" strokeLinecap="round" ></path></svg></span ></span> </a> </div> </section> <section class="cves-section"> <div class="container-xl cves-wrapper"> <div class="cve-cards d-flex flex-column flex-md-row"> <div class="cve-card-item px-4 py-6 p-md-8"> <svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg" > <path d="M16.9393 9.93934C16.3536 10.5251 16.3536 11.4749 16.9393 12.0607L19.8787 15L16.9393 17.9393C16.3536 18.5251 16.3536 19.4749 16.9393 20.0607C17.5251 20.6464 18.4749 20.6464 19.0607 20.0607L23.0607 16.0607C23.6464 15.4749 23.6464 14.5251 23.0607 13.9393L19.0607 9.93934C18.4749 9.35355 17.5251 9.35355 16.9393 9.93934Z" fill="#C8FF80" /> <path d="M13.0607 12.0607C13.6464 11.4749 13.6464 10.5251 13.0607 9.93934C12.4749 9.35355 11.5251 9.35355 10.9393 9.93934L6.93934 13.9393C6.35355 14.5251 6.35355 15.4749 6.93934 16.0607L10.9393 20.0607C11.5251 20.6464 12.4749 20.6464 13.0607 20.0607C13.6464 19.4749 13.6464 18.5251 13.0607 17.9393L10.1213 15L13.0607 12.0607Z" fill="#C8FF80" /> <path fill-rule="evenodd" clip-rule="evenodd" d="M24.4931 26.6144C21.9073 28.7305 18.6019 30 15 30C6.71573 30 0 23.2843 0 15C0 6.71573 6.71573 0 15 0C23.2843 0 30 6.71573 30 15C30 18.6019 28.7305 21.9073 26.6144 24.4931L31.5607 29.4393C32.1464 30.0251 32.1464 30.9749 31.5607 31.5607C30.9749 32.1464 30.0251 32.1464 29.4393 31.5607L24.4931 26.6144ZM3 15C3 8.37258 8.37258 3 15 3C21.6274 3 27 8.37258 27 15C27 18.1648 25.7749 21.0434 23.773 23.1875C23.6534 23.2538 23.5409 23.3378 23.4393 23.4393C23.3378 23.5409 23.2538 23.6534 23.1875 23.773C21.0434 25.7749 18.1648 27 15 27C8.37258 27 3 21.6274 3 15Z" fill="#C8FF80" /> </svg> <div class="total-cve-count font-mono mt-6 font-mono">20,000+</div> <div class="cve-found-text font-mona">security advisories</div> <div class="by-text font-mona"> curated by Security Lab researchers </div> <div class="cve-date-selected"> <span class="cve-date-selected-count font-mono" >6,000+ CVEs</span > <span class="cve-date-selected-text font-mona" >assigned for OS maintainers</span > </div> </div> <div class="cve-card-item px-4 py-6 p-md-8 d-block d-md-flex flex-column flex-items-center flex-justify-center" > <div class="cve-text-content"> <h3 class="cve-text-header mb-4 mb-md-3 font-mona"> GitHub Advisory Database </h3> <div class="cve-text pr-0 font-mona"> While CVEs identify vulnerabilities, they don’t tell the whole story. Entries in the GitHub Advisory database expand beyond identification to include additional context and details to support automated security tooling – sourced from a global community of security experts and curated by the Security Lab – to help you understand vulnerabilities, assess risk, and fix with confidence and efficiency. </div> <div class="cve-text-footer mt-5 mt-md-7"> <a class="btn-animated link-animated d-flex flex-items-center align-items-center flex-justify-start" href="https://github.com/advisories" target="_blank" > <span> <span class="underlined-text font-mona" >Explore the Advisory Database </span> <svg aria-hidden="true" role="presentation" xmlns="http://www.w3.org/2000/svg" class="arrow-symbol" width="16" height="16" viewBox="0 0 16 16" fill="none" > <path class="path-default" fill="currentColor" d="M7.28033 3.21967C6.98744 2.92678 6.51256 2.92678 6.21967 3.21967C5.92678 3.51256 5.92678 3.98744 6.21967 4.28033L7.28033 3.21967ZM11 8L11.5303 8.53033C11.8232 8.23744 11.8232 7.76256 11.5303 7.46967L11 8ZM6.21967 11.7197C5.92678 12.0126 5.92678 12.4874 6.21967 12.7803C6.51256 13.0732 6.98744 13.0732 7.28033 12.7803L6.21967 11.7197ZM6.21967 4.28033L10.4697 8.53033L11.5303 7.46967L7.28033 3.21967L6.21967 4.28033ZM10.4697 7.46967L6.21967 11.7197L7.28033 12.7803L11.5303 8.53033L10.4697 7.46967Z" ></path> <path class="path-hover" stroke="currentColor" d="M1.75 8H11" strokeWidth="1.5" strokeLinecap="round" ></path> </svg> </span> </a> </div> </div> </div> </div> </div> </section> <section class="home-resources-section"> <div class="container-xl resources-wrapper d-flex flex-column align-items-center flex-items-center pt-8 pt-md-10" > <div class="resources-tag mt-0 mt-md-10 font-mona">Resources</div> <h3 class="resource-top-header-bold mt-4 hide-sm hide-md font-mona"> Open doors, open solutions: </h3> <h3 class="resource-top-header-light hide-sm hide-md font-mona"> Embracing Enterprise & Open Source </h3> <div class="resource-top-header-bold hide-lg hide-xl mt-3 font-mona"> Open doors, open solutions:<span class="resource-top-header-light"> Embracing Enterprise & Open Source</span > </div> <p class="resource-text hide-lg hide-xl mt-3 mb-8 font-mona"> Contributions from maintainers, developers, and security researchers around the world push us forward, making the open source software a better place. </p> <div class="open-source d-flex flex-column-reverse flex-md-row align-items-center flex-items-center mt-0 mt-md-7 py-0 py-md-7" > <div class="open-source-content"> <h4 class="open-source-content-header mb-4 mb-md-3 font-mona"> Open Source Community </h4> <p class="open-source-content-text m-0 font-mona"> Learn about secure coding practices, get hands-on with AppSec training, and connect with experts during our office hours – free for open source developers, maintainers, and security researchers. </p> <div class="open-source-footer mt-5 mt-md-7"> <a class="btn-animated link-animated d-flex flex-items-center align-items-center flex-justify-start" href="/open-source/" > <span> <span class="underlined-text font-mona" >Explore open-source resources </span> <svg aria-hidden="true" role="presentation" xmlns="http://www.w3.org/2000/svg" class="arrow-symbol" width="16" height="16" viewBox="0 0 16 16" fill="none" > <path class="path-default" fill="currentColor" d="M7.28033 3.21967C6.98744 2.92678 6.51256 2.92678 6.21967 3.21967C5.92678 3.51256 5.92678 3.98744 6.21967 4.28033L7.28033 3.21967ZM11 8L11.5303 8.53033C11.8232 8.23744 11.8232 7.76256 11.5303 7.46967L11 8ZM6.21967 11.7197C5.92678 12.0126 5.92678 12.4874 6.21967 12.7803C6.51256 13.0732 6.98744 13.0732 7.28033 12.7803L6.21967 11.7197ZM6.21967 4.28033L10.4697 8.53033L11.5303 7.46967L7.28033 3.21967L6.21967 4.28033ZM10.4697 7.46967L6.21967 11.7197L7.28033 12.7803L11.5303 8.53033L10.4697 7.46967Z" ></path> <path class="path-hover" stroke="currentColor" d="M1.75 8H11" strokeWidth="1.5" strokeLinecap="round" ></path> </svg> </span> </a> </div> </div> <img src="/assets/img/marketing/open-source.png" alt="" width="708" height="500" class="home-background-img d-block hide-sm hide-md" /> <img src="/assets/img/marketing/open-source-mobile.png" alt="" width="100%" height="203" class="home-background-img d-block hide-lg hide-xl" /> </div> </div> </section> <section class="gh-sec-lab-section py-8 py-md-7"> <div class="container-xl gh-sec-lab-wrapper d-flex flex-column flex-md-row align-items-center flex-items-center mb-0 mb-md-10" > <img src="/assets/img/marketing/sec-lab.png" alt="" width="708" height="500" class="gh-sec-lab-img d-block hide-sm hide-md" /> <img src="/assets/img/marketing/sec-lab.png" alt="" width="100%" height="100%" class="gh-sec-lab-img d-block hide-lg hide-xl" /> <div class="sec-lab-content pr-0 pr-md-6"> <h3 class="sec-lab-content-header mb-4 mb-md-3 font-mona"> GitHub Security Lab for the Enterprise </h3> <p class="sec-lab-content-text m-0 font-mona"> At the GitHub Security Lab, our security experts, through community collaboration, strengthen open source security which is crucial for enterprises. We channel the community’s contributions into proven CodeQL queries and timely security advisories, and offer enterprises actionable insights that help secure your supply chain and accelerate the software development lifecycle. </p> <div class="sec-lab-footer mt-5 mt-md-7"> <a class="btn-animated link-animated d-flex flex-items-center align-items-center flex-justify-start" href="/enterprise/" > <span> <span class="underlined-text font-mona" >Explore enterprise resources </span> <svg aria-hidden="true" role="presentation" xmlns="http://www.w3.org/2000/svg" class="arrow-symbol" width="16" height="16" viewBox="0 0 16 16" fill="none" > <path class="path-default" fill="currentColor" d="M7.28033 3.21967C6.98744 2.92678 6.51256 2.92678 6.21967 3.21967C5.92678 3.51256 5.92678 3.98744 6.21967 4.28033L7.28033 3.21967ZM11 8L11.5303 8.53033C11.8232 8.23744 11.8232 7.76256 11.5303 7.46967L11 8ZM6.21967 11.7197C5.92678 12.0126 5.92678 12.4874 6.21967 12.7803C6.51256 13.0732 6.98744 13.0732 7.28033 12.7803L6.21967 11.7197ZM6.21967 4.28033L10.4697 8.53033L11.5303 7.46967L7.28033 3.21967L6.21967 4.28033ZM10.4697 7.46967L6.21967 11.7197L7.28033 12.7803L11.5303 8.53033L10.4697 7.46967Z" ></path> <path class="path-hover" stroke="currentColor" d="M1.75 8H11" strokeWidth="1.5" strokeLinecap="round" ></path> </svg> </span> </a> </div> </div> </div> </section> <section class="about-section"> <div class="container-xl about-section-lab-wrapper"> <div class="about-github d-flex flex-column flex-md-row align-items-center flex-items-center px-4 py-5 p-md-8 mt-8 mt-md-10" > <div class="about-content"> <div class="team-tag font-mona">Team</div> <h3 class="about-header mt-3 font-mona"> About the GitHub Security Lab. </h3> <div class="about-text mt-3 mt-md-4 font-mona"> At the GitHub Security Lab, we cultivate a collaborative community of developers and security experts who work together to bolster the security of open source software. </div> <a href="/team/" class="btn-animated btn-about mt-5 mt-md-6" ><span class="btn-about-content font-alliance"> <span>Meet the team</span> <span ><svg aria-hidden="true" role="presentation" xmlns="http://www.w3.org/2000/svg" class="arrow-symbol" width="16" height="16" viewBox="0 0 16 16" fill="none" > <path class="path-default" fill="currentColor" d="M7.28033 3.21967C6.98744 2.92678 6.51256 2.92678 6.21967 3.21967C5.92678 3.51256 5.92678 3.98744 6.21967 4.28033L7.28033 3.21967ZM11 8L11.5303 8.53033C11.8232 8.23744 11.8232 7.76256 11.5303 7.46967L11 8ZM6.21967 11.7197C5.92678 12.0126 5.92678 12.4874 6.21967 12.7803C6.51256 13.0732 6.98744 13.0732 7.28033 12.7803L6.21967 11.7197ZM6.21967 4.28033L10.4697 8.53033L11.5303 7.46967L7.28033 3.21967L6.21967 4.28033ZM10.4697 7.46967L6.21967 11.7197L7.28033 12.7803L11.5303 8.53033L10.4697 7.46967Z" ></path> <path class="path-hover" stroke="currentColor" d="M1.75 8H11" strokeWidth="1.5" strokeLinecap="round" ></path></svg></span ></span> </a> </div> <div class="image-wrapper"> <img src="/assets/img/marketing/team.jpg" alt="" width="536" class="about-img d-block hide-sm hide-md" /> </div> </div> <div class="more-cards d-flex flex-column flex-md-row pt-3 pt-md-6 pt-md-7 pb-8 pb-md-10" > <div class="more-card-item py-5 px-4 p-md-5"> <svg width="48" height="49" viewBox="0 0 48 49" fill="none" xmlns="http://www.w3.org/2000/svg" > <path d="M24.2134 3.69531C12.7363 3.69531 3.42773 13.0407 3.42773 24.5671C3.42773 33.7889 9.38284 41.6124 17.6434 44.3727C18.681 44.5657 19.017 43.9187 19.017 43.3691V39.4835C13.2351 40.7462 12.0313 37.0206 12.0313 37.0206C11.0855 34.6082 9.72234 33.9663 9.72234 33.9663C7.83604 32.6706 9.86611 32.6984 9.86611 32.6984C11.9533 32.8445 13.0515 34.8499 13.0515 34.8499C14.9049 38.0398 17.9136 37.118 19.1002 36.584C19.2855 35.236 19.8242 34.3142 20.4201 33.7942C15.8039 33.2637 10.9504 31.4739 10.9504 23.4783C10.9504 21.198 11.7628 19.337 13.0914 17.8759C12.8766 17.3489 12.1647 15.2252 13.294 12.3519C13.294 12.3519 15.04 11.7918 19.0118 14.4912C20.6695 14.0286 22.4467 13.7973 24.2134 13.7886C25.9802 13.7973 27.7591 14.0286 29.4203 14.4912C33.3886 11.7918 35.1311 12.3519 35.1311 12.3519C36.2622 15.227 35.5503 17.3507 35.3355 17.8759C36.6693 19.337 37.4747 21.1998 37.4747 23.4783C37.4747 31.4948 32.6126 33.2602 27.9843 33.7768C28.7291 34.4238 29.4099 35.6935 29.4099 37.6415V43.3691C29.4099 43.9239 29.7424 44.5762 30.7973 44.3709C39.051 41.6072 44.9992 33.7855 44.9992 24.5671C44.9992 13.0407 35.6924 3.69531 24.2134 3.69531Z" fill="#24292F" /> </svg> <h4 class="card-item-header mt-4 mt-md-5 font-alliance"> Learn more on GitHub Security Lab </h4> <p class="card-item-header-text mt-3 font-alliance"> Through research, education, and maintenance of the GitHub Advisory Database, we empower the community. </p> <div class="card-item-footer mt-5"> <a class="btn-animated link-animated d-flex flex-items-center align-items-center flex-justify-start follow-link" href="https://github.blog/tag/github-security-lab/" target="_blank" > <span> <span class="underlined-text-blue font-alliance" >Read our Blog</span > <svg aria-hidden="true" role="presentation" xmlns="http://www.w3.org/2000/svg" class="arrow-symbol" width="16" height="16" viewBox="0 0 16 16" fill="none" > <path class="path-default" fill="currentColor" d="M7.28033 3.21967C6.98744 2.92678 6.51256 2.92678 6.21967 3.21967C5.92678 3.51256 5.92678 3.98744 6.21967 4.28033L7.28033 3.21967ZM11 8L11.5303 8.53033C11.8232 8.23744 11.8232 7.76256 11.5303 7.46967L11 8ZM6.21967 11.7197C5.92678 12.0126 5.92678 12.4874 6.21967 12.7803C6.51256 13.0732 6.98744 13.0732 7.28033 12.7803L6.21967 11.7197ZM6.21967 4.28033L10.4697 8.53033L11.5303 7.46967L7.28033 3.21967L6.21967 4.28033ZM10.4697 7.46967L6.21967 11.7197L7.28033 12.7803L11.5303 8.53033L10.4697 7.46967Z" ></path> <path class="path-hover" stroke="currentColor" d="M1.75 8H11" strokeWidth="1.5" strokeLinecap="round" ></path> </svg> </span> </a> </div> </div> <div class="more-card-item py-5 px-4 p-md-5"> <svg width="48" height="49" viewBox="0 0 48 49" fill="none" xmlns="http://www.w3.org/2000/svg" > <path d="M23.8533 4.63281C12.3386 4.63281 3.00415 13.969 3.00415 25.4819C3.00415 36.9966 12.3386 46.3294 23.8533 46.3294C35.3679 46.3294 44.7007 36.9966 44.7007 25.4819C44.7007 13.969 35.3671 4.63281 23.8533 4.63281ZM34.3553 21.2783C34.3663 21.5035 34.3706 21.7295 34.3706 21.9581C34.3706 28.9016 29.0857 36.9068 19.4218 36.9068C16.4551 36.9068 13.6925 36.0373 11.3675 34.5472C11.779 34.5955 12.1964 34.62 12.6206 34.62C15.0827 34.62 17.3484 33.7801 19.1458 32.3713C16.8471 32.3281 14.9074 30.8083 14.2386 28.7213C14.5586 28.7839 14.8879 28.8153 15.2266 28.8153C15.7058 28.8153 16.1698 28.7526 16.6109 28.6315C14.2064 28.1489 12.3954 26.0238 12.3954 23.4804C12.3954 23.4576 12.3954 23.4356 12.3962 23.4127C13.104 23.8064 13.9143 24.0426 14.7762 24.0706C13.3656 23.1265 12.4385 21.5204 12.4385 19.6967C12.4385 18.734 12.6976 17.8306 13.1497 17.0551C15.7414 20.2335 19.6132 22.3256 23.9803 22.544C23.8905 22.1605 23.844 21.7583 23.844 21.3468C23.844 18.4462 26.196 16.0933 29.0984 16.0933C30.6097 16.0933 31.9745 16.7317 32.9329 17.7519C34.1301 17.5174 35.2545 17.0788 36.2696 16.4768C35.8759 17.7045 35.0437 18.734 33.9582 19.3834C35.0225 19.2564 36.0351 18.9736 36.9766 18.5562C36.2739 19.612 35.3823 20.5374 34.3553 21.2783Z" fill="#24292F" /> </svg> <h4 class="card-item-header mt-4 mt-md-5 font-alliance"> We’re active on social media! </h4> <p class="card-item-header-text mt-3 font-alliance"> Through research, education, and maintenance of the GitHub Advisory Database, we empower the community. </p> <div class="card-item-footer mt-5"> <a class="btn-animated link-animated d-flex flex-items-center align-items-center flex-justify-start follow-link" href="https://twitter.com/GHSecurityLab" target="_blank" ><span> <span class="underlined-text-blue font-alliance" >Follow us on Twitter </span> <svg aria-hidden="true" role="presentation" xmlns="http://www.w3.org/2000/svg" class="arrow-symbol" width="16" height="16" viewBox="0 0 16 16" fill="none" > <path class="path-default" fill="currentColor" d="M7.28033 3.21967C6.98744 2.92678 6.51256 2.92678 6.21967 3.21967C5.92678 3.51256 5.92678 3.98744 6.21967 4.28033L7.28033 3.21967ZM11 8L11.5303 8.53033C11.8232 8.23744 11.8232 7.76256 11.5303 7.46967L11 8ZM6.21967 11.7197C5.92678 12.0126 5.92678 12.4874 6.21967 12.7803C6.51256 13.0732 6.98744 13.0732 7.28033 12.7803L6.21967 11.7197ZM6.21967 4.28033L10.4697 8.53033L11.5303 7.46967L7.28033 3.21967L6.21967 4.28033ZM10.4697 7.46967L6.21967 11.7197L7.28033 12.7803L11.5303 8.53033L10.4697 7.46967Z" ></path> <path class="path-hover" stroke="currentColor" d="M1.75 8H11" strokeWidth="1.5" strokeLinecap="round" ></path> </svg> </span> </a> </div> </div> </div> </div> </section> </div> </main> <footer class="sc-dVhcbM cBEMHy footer"> <div class="container-xl py-10"> <div class="d-flex flex-wrap flex-lg-nowrap flex-md-nowrap "> <div class="col-12 col-lg-5 mb-5"> <a href="https://github.com/" data-ga-click="Footer, go to home, text:home" class="octicon-text-white" aria-label="Go to GitHub homepage" > <svg height="30" class="octicon octicon-logo-github" viewBox="0 0 45 16" version="1.1" width="84" aria-hidden="true" > <path fill-rule="evenodd" d="M18.53 12.03h-.02c.009 0 .015.01.024.011h.006l-.01-.01zm.004.011c-.093.001-.327.05-.574.05-.78 0-1.05-.36-1.05-.83V8.13h1.59c.09 0 .16-.08.16-.19v-1.7c0-.09-.08-.17-.16-.17h-1.59V3.96c0-.08-.05-.13-.14-.13h-2.16c-.09 0-.14.05-.14.13v2.17s-1.09.27-1.16.28c-.08.02-.13.09-.13.17v1.36c0 .11.08.19.17.19h1.11v3.28c0 2.44 1.7 2.69 2.86 2.69.53 0 1.17-.17 1.27-.22.06-.02.09-.09.09-.16v-1.5a.177.177 0 00-.146-.18zM42.23 9.84c0-1.81-.73-2.05-1.5-1.97-.6.04-1.08.34-1.08.34v3.52s.49.34 1.22.36c1.03.03 1.36-.34 1.36-2.25zm2.43-.16c0 3.43-1.11 4.41-3.05 4.41-1.64 0-2.52-.83-2.52-.83s-.04.46-.09.52c-.03.06-.08.08-.14.08h-1.48c-.1 0-.19-.08-.19-.17l.02-11.11c0-.09.08-.17.17-.17h2.13c.09 0 .17.08.17.17v3.77s.82-.53 2.02-.53l-.01-.02c1.2 0 2.97.45 2.97 3.88zm-8.72-3.61h-2.1c-.11 0-.17.08-.17.19v5.44s-.55.39-1.3.39-.97-.34-.97-1.09V6.25c0-.09-.08-.17-.17-.17h-2.14c-.09 0-.17.08-.17.17v5.11c0 2.2 1.23 2.75 2.92 2.75 1.39 0 2.52-.77 2.52-.77s.05.39.08.45c.02.05.09.09.16.09h1.34c.11 0 .17-.08.17-.17l.02-7.47c0-.09-.08-.17-.19-.17zm-23.7-.01h-2.13c-.09 0-.17.09-.17.2v7.34c0 .2.13.27.3.27h1.92c.2 0 .25-.09.25-.27V6.23c0-.09-.08-.17-.17-.17zm-1.05-3.38c-.77 0-1.38.61-1.38 1.38 0 .77.61 1.38 1.38 1.38.75 0 1.36-.61 1.36-1.38 0-.77-.61-1.38-1.36-1.38zm16.49-.25h-2.11c-.09 0-.17.08-.17.17v4.09h-3.31V2.6c0-.09-.08-.17-.17-.17h-2.13c-.09 0-.17.08-.17.17v11.11c0 .09.09.17.17.17h2.13c.09 0 .17-.08.17-.17V8.96h3.31l-.02 4.75c0 .09.08.17.17.17h2.13c.09 0 .17-.08.17-.17V2.6c0-.09-.08-.17-.17-.17zM8.81 7.35v5.74c0 .04-.01.11-.06.13 0 0-1.25.89-3.31.89-2.49 0-5.44-.78-5.44-5.92S2.58 1.99 5.1 2c2.18 0 3.06.49 3.2.58.04.05.06.09.06.14L7.94 4.5c0 .09-.09.2-.2.17-.36-.11-.9-.33-2.17-.33-1.47 0-3.05.42-3.05 3.73s1.5 3.7 2.58 3.7c.92 0 1.25-.11 1.25-.11v-2.3H4.88c-.11 0-.19-.08-.19-.17V7.35c0-.09.08-.17.19-.17h3.74c.11 0 .19.08.19.17z" ></path> </svg> </a> </div> <div class="col-6 col-sm-3 col-lg-2 mb-6 mb-md-2 px-md-5 "> <h2 class="h5 mb-4 text-mono text-white heading-text">Product</h2> <ul class="list-style-none color-link-secondary"> <li class="py-2"> <a href="https://github.com/features" data-ga-click="Footer, go to features, text:features" class="link-item" >Features</a > </li> <li class="py-2"> <a href="https://github.com/security" data-ga-click="Footer, go to security, text:security" class="link-item" >Security</a > </li> <li class="py-2"> <a href="https://github.com/team" data-ga-click="Footer, go to security, text:security" class="link-item" >Team</a > </li> <li class="py-2"> <a href="https://github.com/enterprise" data-ga-click="Footer, go to enterprise, text:enterprise" class="link-item" >Enterprise</a > </li> <li class="py-2"> <a href="https://github.com/customer-stories?type=enterprise" data-ga-click="Footer, go to customer stories, text:customer stories" class="link-item" >Customer stories</a > </li> <li class="py-2"> <a href="https://github.com/readme" data-ga-click="Footer, go to security, text:security" class="link-item" >The ReadME Project</a > </li> <li class="py-2"> <a href="https://github.com/pricing" data-ga-click="Footer, go to pricing, text:pricing" class="link-item" >Pricing</a > </li> <li class="py-2"> <a href="https://resources.github.com" data-ga-click="Footer, go to resources, text:resources" class="link-item" >Resources</a > </li> <li class="py-2"> <a href="https://github.com/github/roadmap" data-ga-click="Footer, go to resources, text:resources" class="link-item" >Roadmap</a > </li> <li class="py-2"> <a href="https://resources.github.com/devops/tools/compare/" data-ga-click="Footer, go to resources, text:resources" class="link-item text-nowrap" >Compare GitHub</a > </li> </ul> </div> <div class="col-5 col-sm-3 col-lg-2 mb-6 mb-md-2 px-md-5 footer-column"> <h2 class="h5 mb-4 text-mono text-white heading-text">Platform</h2> <ul class="list-style-none color-link-secondary"> <li class="py-2"> <a href="https://developer.github.com" data-ga-click="Footer, go to api, text:api" class="link-item" >Developer API</a > </li> <li class="py-2"> <a href="http://partner.github.com/" data-ga-click="Footer, go to partner, text:partner" class="link-item" >Partners</a > </li> <li class="py-2"> <a href="https://atom.io" data-ga-click="Footer, go to atom, text:atom" class="link-item" >Atom</a > </li> <li class="py-2"> <a href="http://electron.atom.io/" data-ga-click="Footer, go to electron, text:electron" class="link-item" >Electron</a > </li> <li class="py-2"> <a href="https://desktop.github.com/" data-ga-click="Footer, go to desktop, text:desktop" class="link-item" >GitHub Desktop</a > </li> </ul> </div> <div class="col-6 col-sm-3 col-lg-2 mb-6 mb-md-2 px-md-5 "> <h2 class="h5 mb-4 text-mono text-white heading-text">Support</h2> <ul class="list-style-none color-link-secondary"> <li class="py-2"> <a data-ga-click="Footer, go to help, text:docs" class="link-item" href="https://docs.github.com" >Docs</a > </li> <li class="py-2"> <a href="https://github.community" data-ga-click="Footer, go to community, text:community" class="link-item" >Community Forum</a > </li> <li class="py-2"> <a href="https://services.github.com/" data-ga-click="Footer, go to professional services, text:professional services" class="link-item" >Professional Services</a > </li> <li class="py-2"> <a href="https://skills.github.com/" data-ga-click="Footer, go to skills, text:skills" class="link-item" >GitHub Skills</a > </li> <li class="py-2"> <a href="https://githubstatus.com/" data-ga-click="Footer, go to status, text:status" class="link-item" >Status</a > </li> <li class="py-2"> <a data-ga-click="Footer, go to contact, text:contact" class="link-item" href="https://support.github.com" >Contact GitHub</a > </li> </ul> </div> <div class="col-5 col-sm-3 col-lg-2 mb-6 mb-md-2 px-md-5 footer-column"> <h2 class="h5 mb-4 text-mono text-white heading-text">Company</h2> <ul class="list-style-none color-link-secondary"> <li class="py-2"> <a data-ga-click="Footer, go to about, text:about" class="link-item" href="https://github.com/about" >About</a > </li> <li class="py-2"> <a href="https://github.blog" data-ga-click="Footer, go to blog, text:blog" class="link-item" >Blog</a > </li> <li class="py-2"> <a href="https://github.com/about/careers" data-ga-click="Footer, go to careers, text:careers" class="link-item" >Careers</a > </li> <li class="py-2"> <a href="https://github.com/about/press" data-ga-click="Footer, go to press, text:press" class="link-item" >Press</a > </li> <li class="py-2"> <a href="https://github.com/about/careers" data-ga-click="Footer, go to careers, text:careers" class="link-item" >Inclusion</a > </li> <li class="py-2"> <a href="https://github.com/about/press" data-ga-click="Footer, go to press, text:press" class="link-item" >Social Impact</a > </li> <li class="py-2"> <a href="https://shop.github.com" data-ga-click="Footer, go to shop, text:shop" class="link-item" >Shop</a > </li> </ul> </div> </div> </div> <div class="bottom-banner"> <div class="container-xl py-4 d-sm-flex flex-wrap flex-justify-between flex-row-reverse flex-items-center" > <ul class="list-style-none d-flex flex-wrap flex-items-center mb-3 mb-sm-0 social-icons" > <li class="mr-3"> <a href="https://twitter.com/github" data-ga-click="Footer, go to Twitter, text:twitter" title="GitHub on Twitter" > <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 273.5 222.3" class="d-block" height="18" > <path d="M273.5 26.3a109.77 109.77 0 0 1-32.2 8.8 56.07 56.07 0 0 0 24.7-31 113.39 113.39 0 0 1-35.7 13.6 56.1 56.1 0 0 0-97 38.4 54 54 0 0 0 1.5 12.8A159.68 159.68 0 0 1 19.1 10.3a56.12 56.12 0 0 0 17.4 74.9 56.06 56.06 0 0 1-25.4-7v.7a56.11 56.11 0 0 0 45 55 55.65 55.65 0 0 1-14.8 2 62.39 62.39 0 0 1-10.6-1 56.24 56.24 0 0 0 52.4 39 112.87 112.87 0 0 1-69.7 24 119 119 0 0 1-13.4-.8 158.83 158.83 0 0 0 86 25.2c103.2 0 159.6-85.5 159.6-159.6 0-2.4-.1-4.9-.2-7.3a114.25 114.25 0 0 0 28.1-29.1" fill="currentColor" ></path> </svg> </a> </li> <li class="mr-3"> <a href="https://www.facebook.com/GitHub" data-ga-click="Footer, go to Facebook, text:facebook" title="GitHub on Facebook" > <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 15.3 15.4" class="d-block" height="18" > <path d="M14.5 0H.8a.88.88 0 0 0-.8.9v13.6a.88.88 0 0 0 .8.9h7.3v-6h-2V7.1h2V5.4a2.87 2.87 0 0 1 2.5-3.1h.5a10.87 10.87 0 0 1 1.8.1v2.1h-1.3c-1 0-1.1.5-1.1 1.1v1.5h2.3l-.3 2.3h-2v5.9h3.9a.88.88 0 0 0 .9-.8V.8a.86.86 0 0 0-.8-.8z" fill="currentColor" ></path> </svg> </a> </li> <li class="mr-3"> <a href="https://www.youtube.com/github" data-ga-click="Footer, go to YouTube, text:youtube" title="GitHub on YouTube" > <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 19.17 13.6" class="d-block" height="16" > <path d="M18.77 2.13A2.4 2.4 0 0 0 17.09.42C15.59 0 9.58 0 9.58 0a57.55 57.55 0 0 0-7.5.4A2.49 2.49 0 0 0 .39 2.13 26.27 26.27 0 0 0 0 6.8a26.15 26.15 0 0 0 .39 4.67 2.43 2.43 0 0 0 1.69 1.71c1.52.42 7.5.42 7.5.42a57.69 57.69 0 0 0 7.51-.4 2.4 2.4 0 0 0 1.68-1.71 25.63 25.63 0 0 0 .4-4.67 24 24 0 0 0-.4-4.69zM7.67 9.71V3.89l5 2.91z" fill="currentColor" ></path> </svg> </a> </li> <li class="mr-3"> <a href="https://www.linkedin.com/company/github" data-ga-click="Footer, go to Linkedin, text:linkedin" title="GitHub on Linkedin" > <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 19 18" class="d-block" height="18" > <path d="M3.94 2A2 2 0 1 1 2 0a2 2 0 0 1 1.94 2zM4 5.48H0V18h4zm6.32 0H6.34V18h3.94v-6.57c0-3.66 4.77-4 4.77 0V18H19v-7.93c0-6.17-7.06-5.94-8.72-2.91z" fill="currentColor" ></path> </svg> </a> </li> <li> <a href="https://github.com/github" data-ga-click="Footer, go to github's org, text:github" title="GitHub's organization" > <svg height="20" class="octicon octicon-mark-github d-block" viewBox="0 0 16 16" version="1.1" width="20" aria-hidden="true" > <path fill-rule="evenodd" d="M8 0C3.58 0 0 3.58 0 8c0 3.54 2.29 6.53 5.47 7.59.4.07.55-.17.55-.38 0-.19-.01-.82-.01-1.49-2.01.37-2.53-.49-2.69-.94-.09-.23-.48-.94-.82-1.13-.28-.15-.68-.52-.01-.53.63-.01 1.08.58 1.23.82.72 1.21 1.87.87 2.33.66.07-.52.28-.87.51-1.07-1.78-.2-3.64-.89-3.64-3.95 0-.87.31-1.59.82-2.15-.08-.2-.36-1.02.08-2.12 0 0 .67-.21 2.2.82.64-.18 1.32-.27 2-.27.68 0 1.36.09 2 .27 1.53-1.04 2.2-.82 2.2-.82.44 1.1.16 1.92.08 2.12.51.56.82 1.27.82 2.15 0 3.07-1.87 3.75-3.65 3.95.29.25.54.73.54 1.48 0 1.07-.01 1.93-.01 2.2 0 .21.15.46.55.38A8.013 8.013 0 0016 8c0-4.42-3.58-8-8-8z" ></path> </svg> </a> </li> </ul> <ul class="list-style-none d-flex flex-wrap bottom-links-text"> <li class="mr-3"> GitHub Inc. © <!-- -->2024<!-- --> </li> <li class="mr-3"> <a href="https://docs.github.com/en/github/site-policy/github-terms-of-service" data-ga-click="Footer, go to terms, text:terms" class="link-gray" >Terms</a > </li> <li class="mr-3"> <a href="https://docs.github.com/en/github/site-policy/github-privacy-statement" data-ga-click="Footer, go to privacy, text:privacy" class="link-gray" >Privacy</a > </li> <li class="mr-3 hide-sm hide-md"> <a href="#" data-ga-click="Footer, go to terms, text:sitemap" class="link-gray" >Sitemap</a > </li> <li class="mr-3 hide-sm hide-md"> <a href="https://github.com/git-guides" data-ga-click="Footer, go to terms, text:what is git" class="link-gray" >What is Git?</a > </li> <li class="mr-3 hide-sm hide-md"><a href="#" class="link-gray">Manage Cookies</a></li> <li class="mr-3 hide-sm hide-md"> <a href="#" class="link-gray">Do not share my personal information</a> </li> </ul> </div> </div> </footer> <!-- JAVASCRIPT --> <script src="/assets/js/main.js"></script> </body> </html>