Overview
Product Information on GitHub
What is GitHub?
GitHub Pricing
GitHub Product Images


GitHub is a platform where developers, businesses, and organizations collaborate to create and innovate. Offering tools for version control, CI/CD, security, and code review, GitHub helps teams build software efficiently and securely. With GitHub Copilot, developers can leverage AI to receive real-time coding assistance, streamlining their workflows and enabling them to focus on solving complex challenges. The platform supports a wide range of projects, from open source to enterprise, while integrating seamlessly into development processes to foster collaboration and security. As part of Microsoft, GitHub is committed to empowering developers and organizations to bring their ideas to life, working toward the goal of supporting 1 billion developers worldwide.
Do You Manage Peer Insights at GitHub?
Access Vendor Portal to update and manage your profile.
Having all our Java and Selenium scripts stored in such a well organized, dependable environment has really made my day to day work a lot smoother. I especially like how the pull requests make it straightforward for my teammates to look over any updates I make and spot issues before anything gets merged to main. The agent is not just there to help with writing lines of code anymore, it really feels like I have an extra set of hands in the process. I can ask it to update several page objects at once or create a whole new test suite for a fresh scenario and it takes care of everything, even if that involves changing multiple files. If I run into a test failure, I can tell agent to handle it right there in the terminal, and it'll keep trying out solutions on its own until things work. I no longer have to spend ages doing all those tedious set-up and maintenance tasks I used to dread. I've also noticed a big improvement when it comes to debugging. When a stubborn test keeps failing, agent often spots those sneaky little mistakes I might miss myself, like a single-character typo in a JSON path. Thanks to this, my testing cycle is a lot smoother and tackling complex scripts doesn't feel overwhelming anymore. Honestly, I'd find it difficult to go back to coding without this kind of help.
Shift left approach to security, apply them close to the code repository
The tight integration into the developer workflow, making security a natural part of the process rather than a chore, is the standout element. If you have GitHub Copilot licensing too (which we do) then the automated remediation of issues is the knockout punch, compared to other services it doesn't just tell a developer there is an issue and give generic examples of fixes, it gives them the fix within the code itself which they can commit with the click of a button.
The things I dislike about this product are very minor and not a dealbreaker. Honestly, I struggle to find anything major to complain about because the tool is just so good for our automation work. If I had to pick something, it would probably be how the copilot agent can sometimes be a little bit too eager and gets exited to suggest changes. Occasionally it tries to refactor a piece of code that I want to keep exactly as it is and I have to go back and undo its suggestions which can be a tiny bit annoying. Another small thing is that, once in a while, the agent gets a bit confused with our very specific custom libraries in the framework. Since it is trained on so much public code it sometimes defaults to standard selenium ways of doing things instead of using the custom wrappers we have built in our java project. But again it is such a small issue compared to how much time it saves me every single day.
* Poor support - don't reply to your questions * Security controls are hard to implement - some CodeQL rules need to be applied at an individual repo level - very time consuming * Lack of visibility - we had scan that didn't run for over a year and the security dashboard at the organisation level didn't highlight the issue
For some codebases, the configuration/setup wasn't as simple as the sales pitch might suggest (for example, it can struggle with private package feeds), but the onboarding support was very good, with the experts responding to queries quickly and knowledgeably.