1. [Home](https://www.g2.com/) 2. ... 3. [DevOps Software](https://www.g2.com/categories/devops) 4. [Version Control Hosting Software](https://www.g2.com/categories/version-control-hosting) 5. [GitHub](https://www.g2.com/products/github/reviews) 6. [GitHub Claims vs Evidence](https://www.g2.com/products/github/claims-vs-evidence) # GitHub Claims vs Evidence ## Claim: “Keep your code secure by automatically opening pull requests that update vulnerable or out-of-date dependencies.” ##### Supported by reviews. Relevant reviewers report automatic dependency updates with security alerts and checking dependencies for security vulnerabilities, consistent with the claim. The reviews do not explicitly describe pull requests being opened, but no contradictory evidence appears. - “Dependabot – Automatic dependency updates with security alerts.” [Read Full Review](https://www.g2.com/survey_responses/11703921) - “It allows us to store our project's code, automate deployment, and check dependencies for security vulnerabilities.” [Read Full Review](https://www.g2.com/survey_responses/12753239) Last updated Sep 30, 2026 Source: [https://github.com/features](https://github.com/features) ## Claim: “Prevent new vulnerabilities from being introduced by scanning every pull request.” ##### Supported by reviews. Relevant reviewers describe automated checks on pull requests and security-vulnerability scanning or alerts. However, the reviews support the general security-scanning direction rather than independently establishing that every pull request is scanned or that new vulnerabilities are prevented. - “The bots that auto check pull requests and commits are great help as well!” [Read Full Review](https://www.g2.com/survey_responses/12550371) - “It allows us to store our project's code, automate deployment, and check dependencies for security vulnerabilities.” [Read Full Review](https://www.g2.com/survey_responses/12753239) Last updated Sep 30, 2026 Source: [https://github.com/features](https://github.com/features) ## Claim: “Detect exposed secrets in your public and private repositories, and revoke them to secure access to your services.” ##### Supported by reviews. Relevant reviewers describe GitHub detecting or alerting them to potential exposed credentials and security issues. However, the reviews specifically support the detection and notification aspects more clearly than the claim’s revocation capability. - “Secret scanning false-positives are annoying for security research repos (flags test credentials in CTF writeups).” [Read Full Review](https://www.g2.com/survey_responses/12675016) - “I love the notifications feature in GitHub, particularly the security alerts, because they help me stay informed about potential security issues promptly.” [Read Full Review](https://www.g2.com/survey_responses/12028256) Last updated Sep 30, 2026 Source: [https://github.com/features](https://github.com/features) ## Claim: “Solve your backlog of application security debt with security campaigns that target and generate autofixes for up to 1,000 alerts at a time, rapidly reducing the risk of vulnerabilities and zero-day attacks.” ##### Supported by reviews. Relevant reviewers report GitHub checking dependencies for vulnerabilities and providing automated security alerts, supporting the claim’s general security-risk reduction direction. However, these reviews do not establish security campaigns, autofixes, the 1,000-alert capacity, or the claimed speed of reduction. - “It allows us to store our project's code, automate deployment, and check dependencies for security vulnerabilities.” [Read Full Review](https://www.g2.com/survey_responses/12753239) - “I love the notifications feature in GitHub, particularly the security alerts, because they help me stay informed about potential security issues promptly.” [Read Full Review](https://www.g2.com/survey_responses/12028256) Last updated Sep 30, 2026 Source: [https://github.com/features](https://github.com/features) ## Claim: “Get suggestions for whole lines of code or entire functions right inside your editor.” ##### Supported by reviews. Relevant reviewers report that GitHub Copilot provides code suggestions and speeds up code completion, including through integrations with editors such as VS Code. The reviews support the claimed in-editor suggestion functionality, though they do not specifically quantify or separately confirm whole-function suggestions. - “GitHub Copilot and code suggestions have also helped me speed up development and reduce repetitive coding...” [Read Full Review](https://www.g2.com/survey_responses/12814767) - “Copilot AI speeds up code completion.” [Read Full Review](https://www.g2.com/survey_responses/13403949) - “The integration with editors like VS Code and AI tools like Copilot make it even more powerful.” [Read Full Review](https://www.g2.com/survey_responses/11715635) Last updated Sep 30, 2026 Source: [https://github.com/features](https://github.com/features) ## Claim: “Receive alerts when new vulnerabilities affect your repositories, with GitHub detecting and notifying you of vulnerable dependencies in both public and private repositories.” ##### Supported by reviews. Relevant reviewers report GitHub security alerts, dependency-vulnerability checks, and notifications about critical issues. These reviews support the alerting and detection functionality, although they do not explicitly verify coverage across both public and private repositories. - “I love the notifications feature in GitHub, particularly the security alerts, because they help me stay informed about potential security issues promptly.” [Read Full Review](https://www.g2.com/survey_responses/12028256) - “Dependabot – Automatic dependency updates with security alerts.” [Read Full Review](https://www.g2.com/survey_responses/11703921) - “It allows us to store our project's code, automate deployment, and check dependencies for security vulnerabilities.” [Read Full Review](https://www.g2.com/survey_responses/12753239) - “It’s good that it notifies us, and it also alerts us when there’s a critical bug in the code, but code push notifications can still bury the bug notifications.” [Read Full Review](https://www.g2.com/survey_responses/12710580) Last updated Sep 30, 2026 Source: [https://github.com/features](https://github.com/features) ## Claim: “Automate your software workflows by writing tasks and combining them to build, test, and deploy faster from GitHub.” ##### Supported by reviews. Most relevant reviewers report that GitHub Actions automates builds, tests, deployments, and redeployments while saving time or accelerating releases. Some reviewers note that complex workflows can be difficult to manage, but this is a minority concern relative to the consistently reported automation benefits. - “Honestly, what I love most about GitHub is how effortlessly it integrates with CI/CD pipelines — Actions alone saves so much time automating builds, tests, and deployments right from the repo.” [Read Full Review](https://www.g2.com/survey_responses/12866393) - “For me, the biggest advantage of GitHub is the CI/CD pipelines we built using GitHub Actions. This keeps us deployment-ready as soon as development is ready—once we push to QA or UAT, and then to PROD, the deployment is completed almost immediately.” [Read Full Review](https://www.g2.com/survey_responses/12313399) - “The most important part for us is GitHub Actions. Every time we edit the code, it automatically pushes and redeploys to Render.” [Read Full Review](https://www.g2.com/survey_responses/12710580) Last updated Sep 30, 2026 Source: [https://github.com/features](https://github.com/features) ## Claim: “Powered by GitHub Copilot, generate automatic fixes for 90% of alert types in JavaScript, TypeScript, Java, and Python.” ##### Supported by reviews. Relevant reviewers generally report that Copilot helps catch issues, resolve errors, and refactor code, although one reviewer notes that its suggestions can be incorrect and require manual review. The reviews support the general fixing capability but do not establish the specific 90% coverage figure or confirm coverage across the four named languages. - “Copilot suggestions inside PRs are actually useful for catching obvious issues during...” [Read Full Review](https://www.g2.com/survey_responses/12675016) - “Github has a very amazing coding assistant that is Github co-pilot which help a lot in refactoring code within Github, resolving error and many more” [Read Full Review](https://www.g2.com/survey_responses/10671793) - “AI-powered tools like Copilot enhance productivity and help catch errors efficiently I use it all the time and implement a lot of projects easily with it with my team.” [Read Full Review](https://www.g2.com/survey_responses/12521003) - “GitHub Copilot is useful, but sometimes the AI suggestions generate unnecessary or incorrect code that still needs manual review....” [Read Full Review](https://www.g2.com/survey_responses/12814767) Last updated Sep 30, 2026 Source: [https://github.com/features](https://github.com/features) ## Claim: “Spin up fully configured dev environments in the cloud with the full power of your favorite editor.” ##### Supported by reviews. Relevant reviewers describe GitHub Codespaces positively as a valuable development resource, supporting the cloud development-environment aspect of the claim. However, the reviews do not specifically detail fully configured environments or the full capabilities of a preferred editor. - “GitHub Codespaces, and agents are real lifesavers.” [Read Full Review](https://www.g2.com/survey_responses/12553534) - “The recent improvements in Copilot and Codespaces show a strong push toward developer productivity.” [Read Full Review](https://www.g2.com/survey_responses/11313870) Last updated Sep 30, 2026 Source: [https://github.com/features](https://github.com/features) ## Claim: “Move automation to the cloud with on-demand Linux, macOS, Windows, ARM, and GPU environments for your workflow runs, all hosted by GitHub.” ##### Supported by reviews. Relevant reviewers consistently report using GitHub Actions to automate builds, tests, deployments, and workflows from the repository, supporting the cloud-based automation aspect of the claim. However, these reviews do not independently verify the specific Linux, macOS, Windows, ARM, and GPU environment list or that every environment is hosted by GitHub. - “Honestly, what I love most about GitHub is how effortlessly it integrates with CI/CD pipelines — Actions alone saves so much time automating builds, tests, and deployments right from the repo.” [Read Full Review](https://www.g2.com/survey_responses/12866393) - “You can easily run workflows free (so if one considers a VPS this is a better option for smaller scripts).” [Read Full Review](https://www.g2.com/survey_responses/12600521) - “The CI/CD features are amazing. I honestly don’t know what I’d do without GitHub—my whole work is based on it. I haven’t had any pricing issues, and the integrations are excellent.” [Read Full Review](https://www.g2.com/survey_responses/13062429) Last updated Sep 30, 2026 Source: [https://github.com/features](https://github.com/features)