Topic
Everything filed under github, across every section.
GitHub’s legacy tag protection sunset is not just a settings migration. Use this practical checklist to inventory release tags, verify migrated tag rulesets, test controls in a low-risk repository, and assign long-term ownership.
A release tag is a dependency contract, not a label your team can casually move. Learn how GitHub tag-targeting rulesets prevent tag rewrites, where GitHub Releases fit, and how to scope an immutable-tag policy without blocking legitimate development tags.
A Git tag, a GitHub prerelease, and the Latest badge answer three different questions. Use this release engineering workflow to decide when to tag a commit, publish a prerelease, promote stable builds, and explain why tag and release dates differ.
Use the GitHub Changelog as your source of record and a release-notes aggregator as an early-warning layer. This workflow shows how to triage Copilot, Actions, security, CLI, and Enterprise updates into ignore, review, test, or act-now decisions.
Turn GitHub product changes into a 30-minute weekly operating process. Learn how to subscribe, classify releases, improvements, and retirements, assign accountable owners, run proportionate tests, and preserve decisions in a searchable log.
A Git tag, a GitHub release record, and a release asset are three different things with different timestamps and failure modes. Use this checklist and pipeline example to publish reproducible releases without accidentally rebuilding, retagging, or distributing the wrong binary.
A protected tag can stop a version name from being moved, while an immutable release protects the published package and its associated tag after publication. Learn where each control begins and ends, and how to combine them in a practical GitHub release workflow.
A Git tag can point to the right commit while a GitHub Release still points users at the wrong package. Learn the practical difference, then use gh CLI and Git commands to create, inspect, and verify a release with a checklist your team can repeat.
GitHub’s legacy tag-protection rules were migrated to tag rulesets after scheduled API brownouts in 2024. Use this checklist to translate patterns and permissions, create or audit repository rulesets through the supported path, and verify that release tags still point to the intended commits.
Turn GitHub Actions security guidance into a time-boxed repository audit. Find mutable action references, overpowered tokens, risky triggers, and third-party dependencies, then prioritize fixes by blast radius and effort.