Rob's Blog

After almost every governance conversation, I get the same follow-up question: “Can you send the links again?”

GitHub Copilot moves to usage-based billing on June 1.

I’ve been building an extension that gives you insights into your AI usage when coding — how many tokens you consume, which models you prefer, how you structure your prompts, and what your environmental footprint looks like.

Today GitHub released the GitHub Copilot App into technical preview.

Today I had a fun one, where I finally dove into something that was bothering me for days: since a couple of days I had been getting questions from my different GitHub Copilot sessions to close some GitHub nofications, and only from a very specific type of

Over the past few years I’ve been building a collection of open source tools focused on GitHub, DevOps automation, and more recently AI tooling.

Update, August 2026: I revisited this post after Agent Plugins 1.0 shipped and after the enterprise managed settings documentation filled out.

I’ve been using the GitHub Copilot CLI as my main terminal assistant for a while now.

Microsoft has stopped their partnership with Credly for hosting certification badges and instead centralized everything to the Microsoft Learn platform.

In this post, I will walk you through an example of different ways to use the GitHub Copilot Coding Agent to automate a coding task.

Some important changes are happening, which means you will need to start paying for the amount of Generative AI you use with GitHub Copilot.

Where the current focus on productivity is wrong The focus on having more productive engineers is not the right way to go.

TL;DR: Changing the narrative on GitHub Copilot from focus on engineers and productivity to focus on a sturdy (DevOps) foundation to be able to go faster.

Last Friday what we expected happened: a much used GitHub Action got compromised, read all about it here at the StepSecurity blog where they explain that they detected the issue and jumped into action: Step Security Blog.

Today I shared my story on why and how we can protect ourselves against supply chain attacks.

This year I got to share my story on how I think you can successfully scale GitHub Copilot to thousands of developers.

Need to use the Azure Inference AI SDK in Python against Azure OpenAI?

GitHub Copilot is a great tool to help you write code.

Learn how I use GitHub Copilot Chat to my benefit and see the end to end flow on creating a script to call into the GitHub API.

I’ve recorded a video series on the lessons I learned to get the most out of GitHub Copilot.

Learn how I use GitHub Copilot to my benefit and see the end to end flow on a code refactoring example where I extract a script from a yaml pipeline (GitHub Actions) into a separate file.

GitHub Advanced security has gotten quite a big update in public beta at the moment that helps with the rollout of Advanced Security features across your organization.

When you start running CodeQL scans on your Azure DevOps environment on self-hosted runners, you’ll learn that you have to do one extra step and that is install (and keep up to date!)

GitHub Advanced Security for Azure DevOps My newest LinkedInLearning Course is available now!

It’s that time of the year again!

The GitHub UI displays a couple of helpful tips to use in triaging your Dependabot alerts which are super helpful.

GitHub Advanced Security for Azure DevOps (GHAzDo) builds on top of the functionality for GitHub Advanced Security and is giving you extra security tools to embed into your developer way of working.

I had the pleasure of speaking at Developer Week ‘23 in Nuremberg, Germany (link) this year.

A common issue we see with self-hosted runners is that they can leave behind files that were created or modified by the action.

Every time I need to write to the GITHUB_STEP_SUMMARY in GitHub Actions from the actions/github-script action (or from Typescript), I need to search for the blogpost that announced it’s existence.

I will be speaking at GOTO; Aarhus link this year.

Microsoft is bringing some of the GitHub Advanced Security tools to Azure DevOps.

I had the pleasure of speaking at VS LIVE!

During an innovation day at work, I needed to generate extra code and a new application.

To enable CodeQL on GitHub Enterprise Server you need to make sure you have GitHub Actions setup and running, including your own set of self-hosted runners.

After scanning the GitHub Actions Marketplace for the security of those actions (read that post here) I was curious to see what happens if I’d enable Secret Scanning on the forked repositories.

Recently I’ve started to add the OSSF scorecard action to my (action) repositories.

Recently we had to call the GitHub GraphQL API for creating a new GitHub Project (with V2).

I was giving a training today on GitHub Actions and learned something new!

TL;DR The runner just downloads what you specified, by getting it from the tag The runner does not do SemVer at all.

My LinkedIn Learning course on GitHub Advanced Security (GHAS) has been released!

When customers start using GitHub Enterprise with Actions and private runners, there are some common gotcha’s you can run into.

Placeholder for sharing the slide deck for Techorama: session link Abstract: Attacks against your pipelines are more and more common these days.

I have the pleasure of virtually speaking at dotnetsheff and these are the slides for it: Creating modern software has a lot of moving parts.

I have been a fan of GitHub Actions since the beta in the end of 2019.

Check the GitHub status!

I wanted to describe how my flow usually works for creating a GitHub Actions.

I have the pleasure of speaking at Code Europe and these are the slides for it: Creating modern software has a lot of moving parts.

I had the pleasure of giving 3 sessions at NDC Security in Oslo on April 6th and 7th.

I am slowly diving into ‘Configuration as code’ for the GitHub Platform: all the things you want to automate with as few steps as possible, making big impact.