Skip to main content

292 Search results for "best practices"

Code security / Security advisories / Guidance on reporting and writing /

Privately reporting a security vulnerability

form, see "Creating a repository security advisory" and "Best practices for writing repository security advisories." At the bottom of the

Webhooks / Using webhooks /

Handling webhook deliveries

production. Follow best practices You should aim to follow best practices with your webhooks. For more information, see "Best practices for using webhooks

Apps / Creating GitHub Apps / Authenticate with a GitHub App /

Managing private keys for GitHub Apps

code is stored in a private repository. For more information, see "Best practices for creating a GitHub App."

Site policy / GitHub Terms /

GitHub Community Code of Conduct

keep this a clean, well-lighted place for civilized public discourse. Best Practices for Maintaining a Strong Community The primary purpose of the GitHub

GraphQL API / Guides /

Migrating from REST to GraphQL

Learn best practices and considerations for migrating from GitHub's REST API to GitHub's GraphQL API. Differences in API logic GitHub provides two APIs:

Code security / Security advisories / Repository security advisories /

Evaluating the security settings of a repository

form, see "Creating a repository security advisory" and "Best practices for writing repository security advisories." At the bottom of the

Apps / Creating GitHub Apps / Writing code for a GitHub App /

Building a "Login with GitHub" button with a GitHub App

information, see "Best practices for creating a GitHub App." Follow best practices You should aim to follow best practices with your GitHub App

Apps / Creating GitHub Apps / Writing code for a GitHub App /

Building a GitHub App that responds to webhook events

the server where your app is deployed. For more information, see "Best practices for creating a GitHub App." Share your app If you want to share

GitHub Packages / Managing GitHub packages with workflows /

Publishing and installing a package with GitHub Actions

"Automatic token authentication." For more information about the best practices when using a registry in actions, see "Security hardening for GitHub

GitHub Actions / Creating actions /

Dockerfile support for GitHub Actions

see the FROM reference in the Docker documentation. These are some best practices when setting the FROM argument: It's recommended to use official Docker