In preview for GitHub Enterprise Cloud, it blocks malware, risky versions, new install scripts and too-fresh npm packages before agents or CI install them.
GitHub may require sign-in for some anonymous HTTPS clones and fetches of public repos during unusual traffic. SSH, pushes and authenticated Git still work.
Anthropic's 15 October article makes Code Review generally available for Team and Enterprise. Eligible Enterprise orgs can claim credits by 15 January 2027.
GitHub's 7 October changelog puts a fine-tuned secret classifier into push protection, in private preview. GitHub says it scores candidate batches in under 2 ms and could more than double the secrets blocked.
GitHub's 5 October 2026 post introduces ReviewBench: 219 public pull requests shaped against 103.9 million GitHub PRs, with multi-source labels and a leaderboard that includes Copilot code review.
Check a GitHub webhook signature against the received request body before accepting work. Then check the event, prevent duplicate jobs, and decide what the payload is allowed to trigger.
GitHub's 30 September 2026 changelog adds an opt-in Allow npm dist-tag permission on trusted publishing, so an OIDC workflow can move latest, next, or beta without a long-lived token. It defaults to off.
Cloudflare's 1 October 2026 post opens a waitlist for a managed Cloudflare OS deployment. Self-hosting remains. The same post says the workspace can now use a GitHub repo and more of Google Workspace.