Content by Natalie Guevara (29)

Natalie Guevara explains how GitHub reduced 20,000+ secret scanning alerts across 15,000 repositories to zero by separating noise from real risk, validating whether credentials were still live, and building repeatable remediation and ownership workflows that scale across teams.

Natalie Guevara outlines six quick GitHub repository settings that materially reduce common attack paths for maintainers, focusing on vulnerability intake, secret leakage prevention, dependency risk, static analysis, and safer merges to the default branch.

Natalie Guevara explains how GitHub’s Open Source Program Office uses GitHub License Compliance (part of GitHub Advanced Security) to review dependency licenses in pull requests, manage exceptions, and enforce organization-wide policies without blocking teams during rollout.

Natalie Guevara walks through notable changes in Git 2.55, including faster and more incremental repository maintenance (MIDX repacking and bitmap generation), new and improved history-rewriting workflows, and several quality-of-life updates for hooks, status performance, and safer terminal output.

Natalie Guevara explains why GitHub Advisory Database review times have increased as vulnerability reporting volume and complexity hit record levels, what GitHub is doing to scale curation without lowering quality, and what maintainers, researchers, and data consumers can do to help improve advisory accuracy and throughput.

Natalie Guevara shares benchmark results for the GitHub Copilot agentic harness, focusing on token efficiency and task-resolution parity across multiple coding-agent benchmarks. The post explains how Copilot’s shared harness is evaluated against model-vendor harnesses and how multi-model support (20+ models) affects cost, quality, and reproducibility.

Natalie Guevara explains how GitHub built Qubot, an internal GitHub Copilot-powered analytics agent that lets employees ask plain-language questions over warehouse data and get answers quickly, with results captured as markdown reports in pull requests and validated through an offline evaluation framework.

Natalie Guevara introduces GitHub’s new pull request limits for maintainers who are dealing with high volumes of low-quality or spammy contributions, including AI-generated PRs. The post explains how the limits work today and outlines upcoming controls like PR archiving, issue limits, and smarter trust signals.

Natalie Guevara explains how GitHub Copilot is improving token efficiency in longer sessions by caching repeated prompt context, loading tool definitions on demand, and routing requests to the best-fit model via Auto model selection. The post also shares practical habits for reducing credit burn in day-to-day Copilot workflows.

Natalie Guevara explains Git worktrees as a practical way to work on multiple branches at once without stashing or constantly switching contexts, and shows the core commands plus the trade-offs to watch for. The article also connects worktrees to parallel workflows used by tools like the GitHub Copilot app.

Natalie Guevara introduces the most useful slash commands in GitHub Copilot CLI, showing how to control the terminal agent by switching models, checking token/context usage, resuming sessions, reviewing diffs, changing directories, and resetting tool permissions.

Natalie Guevara announces the GitHub Multilingual Repositories Dataset, a CC0-licensed metadata dataset that helps researchers find public repositories with non-English text in READMEs, issues, and pull requests, and explains what’s included, how to use it for evaluation, and where the caveats are.

Natalie Guevara summarizes GitHub’s May 2026 availability incidents and the reliability work underway, including moving parts of the monolith to Azure, isolating database domains, and hardening GitHub Actions and Copilot services against cascading failures.

Natalie Guevara explains how GitHub improved secret scanning alert quality by adding LLM-based contextual verification, reducing false positives while keeping detection coverage. The post breaks down where verification fits in the pipeline, what “better context” means in practice, and the measured impact on customer-confirmed false positive alerts.

Natalie Guevara explains how to give GitHub Copilot CLI real code intelligence by installing and configuring language servers via the LSP Setup skill, replacing brittle grep/decompile workflows with semantic features like go-to-definition, find references, and type resolution in the terminal.

Natalie Guevara explains how to define and run custom agents in GitHub Copilot CLI so repeated terminal tasks become consistent, reviewable workflows. The article shows how agent profiles live in your repo, and includes practical examples for security audits, IaC compliance checks, release notes drafting, and incident response.

Natalie Guevara answers common beginner GitHub questions, including how to set up SSH keys, create personal access tokens (fine-grained and classic), resolve merge conflicts, undo commits, sync forks, and review pull requests—plus a quick look at using GitHub Copilot for code review in PRs.

Natalie Guevara introduces the GitHub Copilot app (technical preview) as a desktop control center for agentic development, covering parallel agent sessions with git worktrees, canvases for inspectable work, local and cloud sandboxes, scalable Copilot code review, and the Copilot SDK and CLI updates.

Natalie Guevara walks beginners through using Visual Studio Code’s built-in Source Control features to work with Git and GitHub, including initializing a repo, creating branches, staging and committing changes, viewing diffs, merging, publishing to GitHub, and cloning repositories, with a short intro to MCP and Copilot Chat.

Natalie Guevara shares GitHub’s announcement that Gartner positioned GitHub as a Leader in the 2026 Magic Quadrant for Enterprise AI Coding Agents, highlighting Copilot’s shift from code generation to agentic, end-to-end SDLC workflows with enterprise governance and security controls.

Natalie Guevara shares GitHub’s accessibility strategy update, covering platform improvements (PRs, themes, search, and CLIs) plus open-source initiatives and tools teams can adopt, including Copilot-powered workflows and a Marketplace accessibility scanner for finding and fixing WCAG issues.

Natalie Guevara shares GitHub’s initial findings from an incident involving a poisoned VS Code extension that led to unauthorized access and exfiltration of GitHub-internal repositories, along with the containment steps taken and what GitHub is monitoring while the investigation continues.

Natalie Guevara shares what GitHub learned while piloting an experimental accessibility agent that answers accessibility questions inside GitHub Copilot and automatically remediates simple issues in pull requests, including the architecture choices, token-cost trade-offs, and guardrails used to keep the agent reliable.

Natalie Guevara explains how GitHub is tightening bug bounty submission standards to reduce low-signal reports, clarify what falls under shared responsibility, and set clearer expectations for proof-of-concept quality and validation (including when AI tools are used).

Natalie Guevara summarizes GitHub’s April 2026 availability incidents, including outages and degradations affecting code search, audit logs, Copilot services, Pages, Codespaces, Actions, and other platform features, with root causes and concrete follow-up actions to improve detection, resilience, and recovery.

Natalie Guevara explains how the GitHub Issues team made navigation feel instant by shifting work to the client: an IndexedDB-backed cache with stale-while-revalidate, a “preheating” strategy to raise cache-hit rates without flooding the backend, and a service worker that accelerates Turbo and hard navigations.

Natalie Guevara announces updates to GitHub Copilot’s individual plans ahead of the June 1, 2026 move to usage-based billing, including new “flex allotments” for Pro and Pro+ and a new Max plan for higher-volume usage.

Natalie Guevara spotlights the most significant GitHub Blog posts of 2025, covering agentic AI, GitHub Copilot enhancements, the Model Context Protocol, and spec-driven development for software engineers.

Natalie Guevara interviews Guido van Rossum about Python’s growth, developer-first philosophy, and its centrality in AI and education, including impacts from tools like GitHub Copilot.