August ‘25 enterprise roundup

August 1, 2025 // 14 min read

image

In case you missed it…

Published via GitHub Executive Insights | Authored by Dave Burnison

The August ‘25 GitHub Enterprise Roundup is a must-read for any software developer or engineering leader navigating the rapidly evolving landscape of AI-powered development, security, and platform governance. We have curated the most impactful updates, best practices, and strategic insights from GitHub’s own engineering playbook, blog posts, changelogs, and community resources—each post and link is handpicked to help you and your teams ship faster, reduce toil, and unlock new levels of developer creativity.

Why skim every linked post?

  • Blueprints for AI Transformation: Dive into GitHub’s internal playbook for building an AI-powered workforce—not just as a tech rollout, but as a holistic change management challenge. Learn how to scale AI fluency from executive strategy to grassroots advocacy, with practical steps for accelerating delivery and reducing developer friction.
  • Platform & Security Innovations: Stay ahead of the curve with detailed changelogs and posts on GitHub Platform, Actions, and Security. Discover new features like API rate limit transparency, improved repository creation, and advanced artifact attestation management—critical for maintaining compliance and governance at scale.
  • CI/CD & Supply Chain Security: Explore actionable guides on streamlining GitHub API calls in Azure Pipelines, defending against workflow injection attacks, and leveraging Dependabot’s new capabilities for Python and NuGet. These updates are essential for teams focused on continuous integration, deployment, and securing the software supply chain.
  • AI & Copilot Deep Dives: Get hands-on with the latest in GitHub Copilot, including new agentic workflows, model selection, and integration with major IDEs. Posts and videos walk you through everything from beginner guides to advanced customizations, code reviews, and leveraging Copilot for .NET modernization.
  • Enterprise-Scale Case Studies: Learn from real-world migrations and platform unifications, like Omnissa’s journey consolidating 4,000+ repos and building a new engineering stack in six months. These stories provide practical lessons for leaders managing large-scale rollouts and developer enablement.
  • Events & Community: Mark your calendar for GitHub Universe and other marquee events, where you’ll connect with industry leaders, gain hands-on experience, and bring back new skills and certifications to your teams.

Common themes from this month's Posts

1. AI adoption as a change management journey

  • GitHub’s approach to AI is not just about tooling, but about transforming culture, upskilling teams, and embedding AI into every layer of the development process. The related posts emphasize executive buy-in, grassroots advocacy, and practical blueprints for scaling AI across the enterprise.

2. Security and compliance by default

  • Security is woven throughout—from new artifact attestation controls and dependency management to delegated alert dismissal and secret scanning oversight. The message: security must be embedded into every workflow, not bolted on after the fact.

3. Developer velocity through automation

  • Continuous improvements to CI/CD, Copilot, and agentic workflows are all about reducing manual toil, accelerating code reviews, and empowering developers to focus on high-value work. Automation is positioned as the key to both productivity and quality.

4. Governance and platform flexibility

  • Updates to repository creation, policy enforcement, and model access reflect a growing need for governance that doesn’t slow down innovation. Leaders are encouraged to leverage new controls to balance compliance with developer autonomy.

Why this matters

For enterprise software developers and leaders, this roundup is more than a list of updates—it’s a strategic guide to building resilient, innovative, and AI-empowered teams. Skimming through the linked posts will equip you with actionable insights, practical tools, and proven strategies to lead your organization through the next wave of software development.

How to use this Enterprise Roundup

Below, you’ll find a carefully selected list of key innovations, expert insights, and must-know resources to help your team innovate faster, boost productivity, and enhance security. Share with your teams and stakeholders so they can also get the most out of their GitHub experience.

We don't expect every person to read every word of this post. Skim through the topics that apply to how you and your teams use GitHub and dig into links that are the most relevant to you. Since some readers may skip over entire sections, you may see the same link appear in multiple sections such as a link that applies to both Code Security and CI/CD. Pass this Enterprise Roundup along to your colleagues or pass along specific links that will be beneficial to others.

Let’s dive in!

Contents at a glance

  1. Events
  2. Developer skills
  3. AI & ML – GitHub Copilot
  4. AI & ML – GitHub models
  5. Security
  6. CI/CD
  7. GitHub platform
  8. Engineering
  9. Legend

Events

While GitHub hosts our own marquee events like Universe and Galaxy each year, you will also find GitHub participating in other industry events. Here is the latest news about upcoming events.

  • 📅 GitHub Universe - Join us at GitHub Universe, happening October 28–29 at the historic Fort Mason in San Francisco. It’s our biggest event of the year—what we like to call the world’s fair of software—bringing together enterprise leaders and engineering experts shaping the future with AI. This year, we’re zeroing in on how companies like yours are:

    • Streamlining your CI/CD pipelines to improve developer velocity
    • Increasing visibility across your application
    • Implementing AI-native threat detection
    • Embedding security into the developer workflow

    You’ll hear from top industry voices, explore hands-on product demos, and connect with other enterprise leaders to learn how they’re driving innovation forward.

    New this year: Each general admission pass includes a GitHub certification exam, so your teams will have even more skills to bring back to your organization.

  • 📅 Check out the complete upcoming conference schedule and upcoming webinar schedule.

Developer skills

General developer expertise based on our own experience and the collective experience of our customers and partners. It's time to start diving into how AI is going to work along side of you to make you a better, more productive developer not, replace you. Check out the new posts 📢, documentation 📄, and articles 📚 to see how AI can make you an awesome developer and guidance for how large enterprises should approach adopting AI.

AI & ML - GitHub Copilot

All things GitHub Copilot, from new and upcoming features to research and data collected from customers showing how GitHub Copilot is accelerating developer productivity. GitHub Copilot is truly getting better all the time! This month it was pretty easy to provide subcategories for all of the GitHub Copilot related updates.

  • NOTE: Key capabilities that are still in Preview as of 2025-08-01 are: GitHub Copilot coding agent, Copilot Spaces, Upgrade assistant for Java in VS Code. To quickly see which GitHub Copilot capabilities are in Preview, go to GitHub Copilot · Your AI pair programmer, Click on "For Business" and scroll down to see a complete list of features. This list highlights which features are Preview.

GitHub Copilot coding agent and Agent Mode

GitHub Copilot and Model Context Protocol (MCP) servers

Providing context to GitHub Copilot

  • 📺 Turn Copilot into a subject matter expert with GitHub Copilot Spaces (1:03) - This video explains how you can use a shared space to ground Copilot in a specific context, like your team's accessibility standards. Watch how you can attach your own components and ask if they are compliant, receiving a specific, high-quality response based only on that curated knowledge.
  • 📺 How to create your first GitHub Copilot Space (Step-by-step guide) (1:22) - This tutorial shows you how to get started by creating and configuring a new space from scratch. Learn to add custom instructions and attach files from your repository to ground Copilot in a specific context, making it easier to perform tasks like building out your test coverage.
  • 📢 Introducing the Awesome GitHub Copilot Customizations repo - Microsoft for Developers - The Awesome Copilot repo is a community-driven resource with custom instructions, reusable prompts, and custom chat modes that helps you get consistent AI assistance. In other words, Awesome Copilot helps you get the most out of GitHub Copilot by letting you tailor it to your needs. And even better, the available content in the Awesome Copilot repo will grow and grow as we encourage folks to contribute instructions, prompts, and chat modes they find useful!

GitHub Copilot code reviews

Additional GitHub Copilot updates

AI & ML - GitHub Models

AI is getting built into solutions everywhere, it's time to experiment with Large Language Models (LLMs) and learn how to build AI into YOUR solutions to keep your customers and stakeholders coming back for more. Now you can leverage GitHub Models from right inside the GitHub platform to learn what dozens of models are capable of, compare the results of models side by side and then see the code that you need to build AI capabilities into your new and existing solutions. NOTE: GitHub Models for organizations and repositories is in public preview.

Security

Application security with GitHub, ensuring the code that lives in GitHub and the dependencies that go into the solutions you build are secure and do not contain any secrets.

Secret Protection

Code Security

Supply chain security

Additional security updates

CI/CD

Continuous Integration & Continuous Deployment with GitHub Actions.

GitHub platform

Resources to assist those who manage the rollout and maintenance of GitHub for hundreds if not thousands of stakeholders.

  • 🌐& 📺 How Omnissa unified 4,000 repos (and its future) with GitHub - GitHub Enterprise on LinkedIn - It's not often that a 2000+ developer organization needs to build a new engineering stack within the span of six months. Omnissa (the former End User Computing business unit at VMware) did exactly this. See how they built on top of GitHub, covering everything from the selection of GitHub to the migrations from Perforce, GitLab, and BitBucket Server, to self-hosted runners, adoption of GHAS, and OSS management using FOSSA.
  • 🚢 npm trusted publishing with OIDC is generally available - This feature enables you to securely publish npm packages directly from CI/CD workflows using OpenID Connect (OIDC) for authentication, reducing the need to manage long-lived tokens. This brings cryptographic trust and automatic provenance to every package release.
  • 🚢 Improved repository creation experience now available in public preview - The redesigned repository creation flow simplifies setup and enforces governance from the very first click.
  • 🚢 Including timeouts in primary rate limits - GitHub improves API rate limit transparency with timeout indicators for better developer experience. The most significant change affects organizations and enterprises using custom repository properties and repository policies. Now, custom property inputs can respond to your organization’s policies, letting you set or limit repository names and visibility right at creation. This helps maintain compliance from the start.
  • 🚢 GitHub Changelog - GitHub Platform, July, 2025 - Skim through all of the GitHub Platform related changes from July.

Engineering

An inside look at how we’re building the home for all developers. Resources based on our internal experiences.

  • 📚 GitHub’s internal playbook for building an AI-powered workforce - Discover how GitHub transformed its workforce by treating AI adoption not as a tech rollout, but as a company-wide change management challenge. This post offers a practical, battle-tested blueprint for scaling AI fluency—from executive strategy to grassroots advocacy—designed to help teams ship faster, reduce toil, and unlock developer creativity.

Legend

That’s it for the August '25 edition of the enterprise roundup. Check back in to the GitHub Executive Insights at the beginning of next month to see the next round of key updates.

We want to hear from you! Did you find this curated list of updates from GitHub helpful? Do you have suggestions on how we can provide the information that is going to be the most useful and timely for your role? Visit the GitHub Community. August ‘25 enterprise roundup - community · Discussion