Block users directly from security advisories
Users can now block other users directly from security advisory pages in public repositories, streamlining the moderation experience for repository owners.
You can now block a user directly from a security advisory page in public repositories owned by either an organization or a personal account. This brings the streamlined moderation experience available for issues and pull requests to security advisories.
Security advisories contain user-created content and, like other collaborative surfaces, can attract spam or abuse. Previously, addressing this required navigating to organization settings, personal settings, or the user’s profile.
With this update, you can:
- Block a user from the three-dot menu in a security advisory description or comment without leaving the page.
- Review a clear confirmation of what blocking the user means before taking action.
- Keep the security advisory intact while removing the source of spam or abuse.
In organization-owned repositories, only organization moderators or administrators can initiate a block. In personal account-owned repositories, the account owner can initiate a block.
Join the Community discussion to share your questions or feedback.
The post Block users directly from security advisories appeared first on The GitHub Blog.
Source: original entry ↗
More from GitHub
Follow GitHub to get its new changes in your feed and email digest.
New controls and chat improvements in Copilot for JetBrains
GitHub Copilot for JetBrains now offers more control over default models and MCP server configuration, improved diagnostics handling, and enhanced chat navigation and account controls.
GitHub Copilot weekly releases — October 5
Weekly updates to GitHub Copilot improve cross-account and cross-environment usability while enhancing control over agent access and work management.
CodeQL 2.27.2 improves C++, Go, Rust, and JavaScript analysis
CodeQL 2.27.2 adds a C++ regular-expression parser and improves static analysis capabilities across C++, Go, Rust, and JavaScript languages for better code scanning detection.