Post

First an important point: we only research open source code, which means that many parts of your phone (for example most of your apps) are out-of-scope for us. That said, all open source code is in-scope, including projects that aren’t hosted on GitHub.

developer.arm.comMali Drivers | Open Source Valhall Mali 4th Gen GPU Architecture Kernel Drivers – Arm DeveloperThe Android and Linux version of the Mali GPUs Device Driver provide low-level access to the Mali GPUs that are part of the Valhall family. Some of these components are being made available under the ...

In this particular case, Man Yue Mo found a bug in Arm Mali, which is an open source GPU driver used on many Android phones. Android itself is open source. developer.arm.com/downloads/-/...

Open source software is the foundation of much of the world’s software. So when open source wins, we win. And that’s why @github.com takes its responsibility seriously, to help make open source software more secure.

GitHub Security Lab sits within GitHub Security, and we focus exclusively on open source security with four main priorities:

6/2/25, 9:59 pm0 reposts0 likes

github.comGitHub Advisory DatabaseA database of software vulnerabilities, using data from maintainer-submitted advisories and from other vulnerability databases.

First, we run the GitHub Advisory Database, which is a comprehensive database of open source vulnerabilities. github.com/advisories

github.blogBuild code security skills with the GitHub Secure Code GameLearn to find and fix security issues while having fun with Secure Code Game, now with new challenges focusing on JavaScript, Python, Go, and GitHub Actions!

Second, we share information around secure coding practices, through blogs and video content. github.blog/developer-sk...

gh.ioCodeQL Wall of FameSecuring open source software, together.

Third, we use GitHub’s CodeQL to scan thousands of open source repositories for common security mistakes, like SQL injections or path traversals. gh.io/codeql-wall-of-fame