Hasty Briefsbeta

All tags

#github

146 stories total

Bilingual

Show HN: The missing inbox for GitHub pull requests
a year ago
- Mergeable is a better inbox for GitHub pull requests.
- Organize pull requests into sections with flexible search queries.
- Data is stored locally in browser storage.
- Includes keyboard shortcuts for quick navigation.
- Supports multiple GitHub instances, including GitHub Enterprise.
- Features an attention set to highlight pull requests requiring action.
- No GitHub app installation required.
- Public instance available at https://app.usemergeable.dev.
- Documentation includes user guide and self-hosting instructions.
- Built with PnPM, Turborepo, and Vite; start locally with 'pnpm run dev'.
You can no longer browse open source code on GitHub without logging in first
a year ago
- User encounters Error 429 (Too Many Requests) when accessing GitHub repository files without logging in.
- Criticism of GitHub's new feature as against open source ethos, suggesting it resembles 'Enshittification'.
- Suggestion to move projects to alternative platforms like Codeberg due to GitHub's perceived predatory practices.
- Issue reproduction steps and expected vs actual behavior detailed, highlighting unclear rate limiting policies.
- Call for clearer error messages or guidance to avoid hitting rate limits when accessing files.
GitHub Models API now available
a year ago
- GitHub Models REST API now available for programmatic use.
- Endpoints include listing models and running chat completions.
- Supports streaming, non-streaming, and advanced options like temperature and seed.
- Inference requests can be attributed to GitHub organizations.
- Documentation and community discussions available for further guidance.
New open source AI projects on GitHub
a year ago
- Top 10 new open source AI projects on GitHub analyzed by GitHub experts.
- Projects ranked based on stars-per-day, forks, traffic spikes, and contributor velocity.
- 1. Open WebUI MCP: Simplifies AI tool integrations with OpenAPI-compatible HTTP servers.
- 2. Unbody: Modular backend for AI-native software with perception, memory, reasoning, and action layers.
- 3. OWL: Enables multi-agent collaboration, topping the GAIA benchmark.
- 4. F/mcptools: CLI for MCP developers to manage prompts and resources.
- 5. Nutlope/self.so: AI tool to build personal websites from résumés or LinkedIn profiles.
- 6. VoiceStar: Text-to-speech with precise duration control for time-sensitive use cases.
- 7. Second-Me: Creates digital twins for personal assistants or professional roles.
- 8. SesameAILabs/csm: Innovative speech synthesis merging language models with audio decoding.
- 9. Letta: Universal standard for portable AI agents with .af file format.
- 10. Blender-MCP: Connects Blender with Claude AI for natural language 3D creation.
- Key trends: MCP integration, multi-agent collaboration, speech generation advancements, and evolving open source participation.
- OSI-approved licenses (MIT, Apache 2.0) are crucial for community trust and project adoption.
GitHub Copilot Coding Agent
a year ago
- GitHub Copilot coding agent helps delegate issues to focus on high-impact work.
- Assign issues to Copilot via GitHub.com, Mobile, or CLI; it works in a secure cloud environment.
- Copilot explores repositories, makes changes, and validates work before pushing.
- After completion, Copilot tags for review; users can request changes via PR comments or continue locally.
- Excels at low-to-medium complexity tasks in well-tested codebases (features, bugs, tests, refactoring, docs).
- Available for Copilot Pro+ and Enterprise; Enterprise requires admin policy enablement.
- Consumes GitHub Actions minutes and Copilot premium requests from plan entitlements.
- Starting June 4th, uses one premium request per model request (preview feature, subject to change).
- Feedback welcome via discussion; UI for preview features may change.
Jules: An Asynchronous Coding Agent
a year ago
- Jules handles coding tasks you don't want to do, allowing you to focus on what you prefer.
- Select a GitHub repository and branch, then provide a detailed prompt for Jules.
- Jules clones the repository to a Cloud VM and uses the Gemini 2.5 Pro model to develop a plan.
- Jules updates files to a new app directory structure and provides a diff of the changes for review.
- Example shown: Updating Next.js version from 10.2.3 to 15.0.1 in dependencies.
- Jules creates a PR with the changes, which you can approve, merge, and publish on GitHub.
- Jules also offers an audio summary of the changes to help you get caught up quickly.
Allow us to block Copilot-generated issues (and PRs) from our own repositories
a year ago
- User requests the ability to block Copilot-generated issues and PRs from their repositories.
- Concerns raised about AI-generated content being a waste of time and violating project codes of conduct.
- Suggests a checkbox or feature to disable Copilot tools on designated repos or accounts.
- Mentions the possibility of moving issue hosting to alternative platforms if the feature is not implemented.
- Notes that the Copilot bot is currently exempt from blocking features and suggests removing this exemption.
RepoRoulette: Randomly sample repositories from GitHub
a year ago
- RepoRoulette provides three methods for random GitHub repository sampling: IDSampler, TemporalSampler, and BigQuerySampler.
- IDSampler uses GitHub's sequential repository ID system for random sampling but has a low hit rate.
- TemporalSampler selects repositories updated during random time periods within a specified date range.
- BigQuerySampler leverages Google BigQuery's public GitHub dataset for advanced filtering but requires a GCP account.
- GHArchiveSampler samples repositories from GitHub Archive, which records public GitHub events.
- Applications include academic research, learning resources, data science, trend analysis, and security research.
- The project is open for contributions and licensed under MIT.
GitHub issues is almost the best notebook in the world
a year ago
- GitHub issues is a versatile notebook for public and private notes with free and unlimited usage.
- Supports comprehensive Markdown, including syntax highlighting and direct drag-and-drop for images/videos.
- Features inter-linking abilities, allowing URLs to other GitHub issues to be pasted and linked automatically.
- Offers excellent search capabilities within a repo, across all repos, or the entire GitHub platform.
- Comes with a comprehensive API for exporting, creating, and editing notes, plus automation via GitHub Actions.
- Lacks synchronized offline support, making Apple Notes preferable for offline use on mobile devices.
GitHub MCP Exploited: Accessing Private Repositories via MCP
a year ago
- Invariant discovered a critical vulnerability in GitHub MCP integration, allowing attackers to hijack a user's agent via a malicious GitHub Issue and leak private repository data.
- The attack involves creating a malicious issue in a public repository, which the agent interacts with, leading to unauthorized access and data exfiltration from private repositories.
- Invariant's automated security scanners identified this as a 'Toxic Agent Flow', where agents are manipulated into unintended actions like data leaks or executing malicious code.
- The vulnerability is not specific to any agent or MCP client but affects any agent using GitHub MCP server, highlighting a fundamental architectural issue.
- Mitigation strategies include implementing granular permission controls and continuous security monitoring with tools like Invariant Guardrails and MCP-scan.
- Model alignment alone is insufficient to prevent such attacks, emphasizing the need for system-level security measures.
- Invariant offers early access to their security program for organizations looking to secure their agent systems against similar vulnerabilities.
Write Terraform policies in natural language instead of Rego / OPA
a year ago
- Infrabase is a GitHub app for detecting security issues and misconfigurations in IaC pull requests.
- Policies can be written in natural language, avoiding the complexity of OPA/Rego/Sentinel.
- Setup involves creating an account, forking the example repo (optional), and installing the GitHub app.
- Infrabase uses an LLM (gemini-2.5-pro-preview-05-06) to check infrastructure against policies.
- Example policy: No duplicate AWS security group ingress rules allowed.
- Supports multiple IaC tools including Terraform, OpenTofu, CDK, CloudFormation, and Pulumi.
- Features include sensible defaults, no need for state/cloud access, and integration with GitHub Advanced Security.
- Policies are stored as markdown files in a 'policies' folder, structured with clear headings and details.
- Rules can be grouped by topic (e.g., security.md, style.md) for better organization.
Show HN: Triage.flow – Chat with Any GitHub Repo Using Faiss and LlamaIndex
a year ago
- Agentic AI-powered GitHub repository analysis tool with interactive chat interface.
- Features ReAct agents for autonomous reasoning, tool usage, and problem-solving.
- Real-time reasoning display with Thought/Action/Observation streaming.
- Smart codebase explorer with file picker, search, and tree navigation.
- Enhanced Markdown with context-aware emojis, file linking, and professional formatting.
- Integrated file viewer with syntax highlighting and quick actions.
- Cost-optimized AI interactions with OpenRouter prompt caching for 25-90% savings.
- Multi-language support via tree-sitter parsers with intelligent fallbacks.
- Real-time status updates and performance monitoring.
- Supports both public and private GitHub repositories with session management.
Tracking Copilot vs. Codex vs. Cursor vs. Devin PR Performance
a year ago
- Performance tracking of different coding agents.
- Table includes metrics: Total PRs, Merged PRs, Success Rate.
- Agents listed: Copilot, Codex, Cursor, Devin.
- Interactive chart failed; static version displayed.
Congratulations on creating the one billionth repository on GitHub
a year ago
- GitHub celebrates the creation of the one billionth repository.
- The repository is named 'shit' and belongs to user 'AasishPokhrel'.
- GitHub expresses hope for the user to build great things and wishes them a great day.
Repository Now Limited by GitHub – Here’s Why
a year ago
- GitHub has placed a content warning on the repository, labeling it as potentially containing 'sexually explicit content'.
- The repository does not contain explicit images or media, only a list of domain names for DNS-based filtering.
- Access to the repository is now restricted to logged-in users who explicitly choose to view the content.
- The list is intended for privacy tools, parental controls, and network filtering, not for distributing explicit content.
- The repository owner has reached out to GitHub for clarification but has not received a response yet.
Malware-Laced GitHub Repos Found Masquerading as Developer Tools
10 months ago
- Klarrio discovered a large-scale malware network on GitHub.
- CTO Bruno De Bus uncovered 2,400 malware-infected repositories and 15,000 fake accounts boosting their ratings.
- Malicious actors clone popular repositories, add malware, and use fake accounts to give high ratings.
- Some variants use AI to rewrite files, creating a false impression of community engagement.
- Malware payloads are fetched from specific URL patterns; users are advised to block these.
- Klarrio tightened its open-source intake process with additional security measures.
- The full list of infected repositories and fake accounts was shared with GitHub and [email protected].
Show HN: Swift UI app for extracting beer information by just taking photos
10 months ago
- The text mentions a requirement to be signed in to change notification settings.
- There is a reference to an iOS app named 'beer_analyzer' for analyzing beer.
- The GitHub repository '38tter/beer_analyzer' is mentioned, but it has no releases or packages published.
- The repository includes folders and files, but no specific details are provided about them.
- The project has stars, watchers, and forks, but the counts are not specified.
Show HN: Shouldiuse.dev – Software dependency health checker
10 months ago
- Analyze GitHub repositories with comprehensive health metrics
- Get security analysis, maintenance scores, and actionable recommendations
- Comprehensive security assessment with vulnerability detection and safety recommendations
- Detailed analysis of maintenance status, community engagement, and project vitality
- Summarizing dozens of metrics into actionable insights for developers and LLMs
Zig breaking change – initial Writergate
10 months ago
- Notifications require signing in to change settings.
- GitHub issue #24329 involves merging 38 commits into the master branch from writergate.
- Changes include unifying msghdr definitions across Linux architectures and rearranging std.io namespace.
- Deprecations and breaking changes in std.fmt and std.io APIs, with new std.io.Reader and std.io.Writer interfaces.
- Upgrade guide provided for transitioning to new APIs, including using -freference-trace for format string breakage.
- New features include memoizing file handle information in std.fs.File.Reader and std.fs.File.Writer.
- Future changes planned for I/O as an Interface and Async/Await Resurrection, not included in this branch.
TIL you can make "GIFs" with SVGs for GitHub README.md files
10 months ago
- Moving SVGs can be used similarly to GIFs but with higher resolution and smaller file sizes (e.g., 49Kb).
- Github supports these moving SVGs in README.md files.
- Tools like asciinema and svg-term-cli are used to create and implement these SVGs.
- SVG animations are built into the SVG spec with elements like <animate>, <animateTransform>, and <animateMotion>.
- svg-term-cli leverages these SVG animation capabilities to create moving SVGs.

first prev1next

About|Login

#github

Show HN: The missing inbox for GitHub pull requests

You can no longer browse open source code on GitHub without logging in first

GitHub Models API now available

New open source AI projects on GitHub

GitHub Copilot Coding Agent

Jules: An Asynchronous Coding Agent

Allow us to block Copilot-generated issues (and PRs) from our own repositories

RepoRoulette: Randomly sample repositories from GitHub

GitHub issues is almost the best notebook in the world

GitHub MCP Exploited: Accessing Private Repositories via MCP

Write Terraform policies in natural language instead of Rego / OPA

Show HN: Triage.flow – Chat with Any GitHub Repo Using Faiss and LlamaIndex

Tracking Copilot vs. Codex vs. Cursor vs. Devin PR Performance

Congratulations on creating the one billionth repository on GitHub

Repository Now Limited by GitHub – Here’s Why

Malware-Laced GitHub Repos Found Masquerading as Developer Tools

Show HN: Swift UI app for extracting beer information by just taking photos

Show HN: Shouldiuse.dev – Software dependency health checker

Zig breaking change – initial Writergate

TIL you can make "GIFs" with SVGs for GitHub README.md files