Host open source projects in public GitHub repositories, accessible via web or command line. Public repositories are accessible to anyone at GitHub.com.

Host code in private GitHub repositories, accessible via appliance, web, and command line. Private repositories are only accessible to you and people you share them with.

Spin up fully configured dev environments in the cloud with the power of your favorite editor. A "core hour" denotes compute usage. On a 2-core machine, you would get 60 hours free. On a 4-core machine, you would get 30 hours free, etc. Free hours are assigned to personal accounts, rather than free organizations.

Use execution minutes with GitHub Actions to automate your software development workflows. Write tasks and combine them to build, test, and deploy any code project on GitHub. Minutes are free for public repositories.
Learn more about billing

Host your own software packages or use them as dependencies in other projects. Both private and public hosting available. Packages are free for public repositories.

Run agent-generated code safely in isolated, stateful cloud environments with snapshot and resume.

Review new code, see visual code changes, and confidently merge code changes with automated status checks.

Allow contributors to easily notify you of changes they've pushed to a repository – with access limited to the contributors you specify. Easily merge changes you accept.

Enforce restrictions on how code branches are merged, including requiring reviews by selected collaborators, or allowing only specific contributors to work on a particular branch.

Automatically request reviews – or require approval – by selected contributors when changes are made to sections of code that they own.

Easily discuss and collaborate on pull requests before submitting to formal review.

Assign more than one person to a pull request.

See data about activity and contributions within your repositories, including trends. You can use this data to improve collaboration and make development faster and more effective.

Send scheduled messages to you or your team listing open pull requests.

Automatically assign code reviews to members of your team based on one of two algorithms.

When a workflow job references an environment, the job won't start until all of the environment's protection rules pass.

A job cannot access secrets that are defined in an environment unless it is running on the specified branch.

Invite any GitHub member, or all GitHub members, to work with you on code in a public repository you control – including making changes and opening issues.

Invite any GitHub member, or all GitHub members, to work with you on code in a private repository you control – including making changes and opening issues.

Track bugs, enhancements, and other requests, prioritize work, and communicate with stakeholders as changes are proposed and merged.

Visualize and manage issues and pull requests across tables, boards, and roadmaps with custom fields and views that you can arrange to suit your workflow.

Track progress on groups of issues or pull requests in a repository, and map groups to overall project goals.

Manage access to projects on a team-by-team, or individual user, basis.

Host documentation and simple websites for your project in a wiki format that contributors can easily edit either on the web or command line.

Assign more than one person to an issue.

Prevent secret exposures by proactively blocking secrets before they reach your code.

Detect and manage exposed secrets across git history, pull requests, issues, and wikis.

GitHub collaborates with AWS, Azure, and Google Cloud to detect secrets with high accuracy. This minimizes false positives, letting you focus on what matters.

Providers get real-time alerts when their tokens appear in public code, enabling them to notify, quarantine, or revoke secrets.

Prioritize active secrets with validity checks for provider patterns.

Use AI to detect unstructured secrets, like passwords, across your repositories.

Use AI to block unstructured secrets at push before they reach your repository.

Detect tokens from unknown providers, including HTTP authentication headers, connection strings, and private keys.

Create your own patterns and find organization-specific secrets.

Manage who can bypass push protection and when.

Understand how risk is distributed across your organization with security metrics and insight dashboards.

Review how and when GitHub scans your repositories for secrets.

Powered by GitHub Copilot, generate automatic fixes for 90% of alert types in JavaScript, Typescript, Java, and Python.

Centralize your findings across all your scanning tools via SARIF upload to GitHub.

Quickly remediate with context provided by Copilot Autofix.

Uncover vulnerabilities in your code with our industry-leading semantic code analysis.

Reduce security debt and burn down your security backlog with security campaigns.

Get a clear view of your project’s dependencies with a summary of manifest, lock files, and submitted dependencies via the API.

Catch insecure dependencies before adding them and get insights on licenses, dependents, and age.

Define alert-centric policies to control how Dependabot handles alerts and pull requests.

Automated pull requests that batch dependency updates for known vulnerabilities.

Automated pull requests that keep your dependencies up to date.

Get a clear view of risk distribution with security metrics and dashboards.

Enforce consistent code standards, security, and compliance across branches and tags.

Export a software bill of materials (SBOM) for your repository.

Ensure unfalsifiable provenance and integrity for your software.

Define users' level of access to your code, data and settings.

Use an extra layer of security with two factor authentication (2FA) when logging into GitHub.

Quickly review the actions performed by members of your organization.

Keep copies of audit log data to ensure secure IP and maintain compliance for your organization.

Share features and workflows between your GitHub Enterprise Server instance and GitHub Enterprise Cloud.

Use an identity provider to manage the identities of GitHub users and applications.

Access GitHub Enterprise Server using your existing accounts and centrally manage repository access.

Limit access to known allowed IP addresses.

Install apps that integrate directly with GitHub's API to improve development workflows – or build your own for private use or publication in the GitHub Marketplace.

Define tests that GitHub automatically runs against code being committed to your repository, and get details about failures and what is causing them.

Create requirements for automatically accepting or rejecting a push based on the contents of the push.

Get help with most of your GitHub questions and issues in our Community Forum.

GitHub Support can help you troubleshoot issues you run into while using GitHub. Get support via the web.

With Premium, get a 30-minute SLA on Urgent tickets and 24/7 web and phone support via callback request. With Premium Plus, get everything in Premium, assigned Customer Reliability Engineer and more.
Learn more about Premium Support

Pay bills via invoice, rather than using your credit card.

Self-hosted GitHub for on-prem appliances or self-managed cloud tenants.

Multi-tenant enterprise SaaS solution on Microsoft Azure, allowing you to choose a regional cloud deployment for data residency, so your in-scope data is stored at rest in a designated location. This is available in the EU and Australia with additional regions coming soon. Contact our sales team to learn more.