GitHub doesn’t want users to name and shame security flaws any more

GitHub is allowing developers to notify their peers of discovered vulnerabilities – quietly. The company says this will avoid the “name and shame” game and prevent exploitations that might result from public disclosure.

In a blog post (opens in new tab) earlier this week, GitHub said given the way that platform is currently set up, sometimes there's no other option but to disclose a vulnerability publicly – and before malware removal software can be deployed – alerting potential threat actors.