github

HackerOneView on HackerOne
RawAI Enhanced
27
In Scope
12
Out of Scope
In-Scope Assets (27)
AssetCategoryBountyQuick Links
*.github.netURLYes
*.githubapp.comURLYes
*.githubusercontent.comURLYes
CopilotOTHERYes-
Copilot Chat on dotcomOTHERYes-
Copilot Coding AgentOTHERYes-
Copilot SpacesOTHERYes-
Copilot for BusinessOTHERYes-
DependabotOTHERYes-
GitHub CLIBINARYYes-
GitHub CSPOTHERYes-
GitHub DesktopBINARYYes-
GitHub Enterprise CloudOTHERYes-
GitHub Enterprise Cloud with Data Residency (GHEC-DR)OTHERYes-
GitHub Enterprise ServerHARDWAREYes-
GitHub PagesOTHERYes-
GitHub Production CredentialsOTHERYes-
GitHub SparkOTHERYes-
GitHub for mobileOTHERYes-
api.github.comURLYes
classroom.github.comURLYes
education.github.comURLYes
gist.github.comURLYes
github.comURLYes
npm CLIBINARYYes-
npmjs.comURLYes
npmjs.orgURLYes
Out-of-Scope Assets (12)
AssetCategoryBounty
*.github.ioURLNo
AtomBINARYNo
ElectronBINARYNo
GitHub Classroom AssistantBINARYNo
blog.github.comURLNo
community.github.comURLNo
enterprise.github.comURLNo
git.ioURLNo
github.blogURLNo
http://education.github.com/forumURLNo
shop.github.comURLNo
spectrum.chatURLNo
Scope Changes (105)
Feb 25, 2026
ChangeAssetCategoryScopeTime
AddeddependabotOTHERIn Scope19:09
Added*.github.ioWILDCARDOut of Scope19:09
Addedapi.github.comURLIn Scope19:09
Addedspectrum.chatURLOut of Scope19:09
Addedgithub.blogURLOut of Scope19:09
Addedblog.github.comURLOut of Scope19:09
Addedshop.github.comURLOut of Scope19:09
Addedgithub desktopURLIn Scope19:09
Addedcopilot spacesOTHERIn Scope19:09
Addedgithub enterprise cloudOTHERIn Scope19:09
Addedcopilot chat on dotcomOTHERIn Scope19:09
Addedgist.github.comURLIn Scope19:09
AddedatomOTHEROut of Scope19:09
Addedclassroom.github.comURLIn Scope19:09
Addedgithub cspOTHERIn Scope19:09
Addedgit.ioURLOut of Scope19:09
Added*.github.netWILDCARDIn Scope19:09
Addedgithub pagesOTHERIn Scope19:09
Addedcopilot for businessOTHERIn Scope19:09
Addedgithub.comURLIn Scope19:09
Addednpmjs.comURLIn Scope19:09
Added*.githubapp.comWILDCARDIn Scope19:09
Addedgithub sparkOTHERIn Scope19:09
Addednpm cliBINARYIn Scope19:09
Addedenterprise.github.comURLOut of Scope19:09
AddedelectronOTHEROut of Scope19:09
Addedgithub enterprise cloud with data residency (ghec-dr)OTHERIn Scope19:09
Addedcommunity.github.comURLOut of Scope19:09
Addedcopilot coding agentOTHERIn Scope19:09
AddedcopilotOTHERIn Scope19:09
Addedgithub production credentialsOTHERIn Scope19:09
Addedgithub cliURLIn Scope19:09
Added*.githubusercontent.comWILDCARDIn Scope19:09
Addednpmjs.orgURLIn Scope19:09
Addedgithub classroom assistantOTHEROut of Scope19:09
Addedgithub for mobileOTHERIn Scope19:09
Addedgithub enterprise serverHARDWAREIn Scope19:09
Addedhttp://education.github.com/forumURLOut of Scope19:09
Addededucation.github.comURLIn Scope19:09
Feb 22, 2026
ChangeAssetCategoryScopeTime
Addedshop.github.comURLOut of Scope00:40
AddeddependabotOTHERIn Scope00:40
Addedgithub for mobileOTHERIn Scope00:40
Addedenterprise.github.comURLOut of Scope00:40
Addedcopilot coding agentOTHERIn Scope00:40
Addedgithub enterprise cloudOTHERIn Scope00:40
Addedcopilot for businessOTHERIn Scope00:40
Addednpmjs.comURLIn Scope00:40
Addedgithub desktopOTHERIn Scope00:40
Addedclassroom.github.comURLIn Scope00:40
Addedgit.ioURLOut of Scope00:40
Addedgithub pagesOTHERIn Scope00:40
Addedgithub cliOTHERIn Scope00:40
Addedgithub.comURLIn Scope00:40
Addedapi.github.comURLIn Scope00:40
Addedgist.github.comURLIn Scope00:40
Addedblog.github.comURLOut of Scope00:40
Addedcopilot chat on dotcomOTHERIn Scope00:40
Added*.githubusercontent.comWILDCARDIn Scope00:40
Addednpmjs.orgURLIn Scope00:40
Addedgithub enterprise cloud with data residency (ghec-dr)OTHERIn Scope00:40
Added*.githubapp.comWILDCARDIn Scope00:40
Addedgithub cspOTHERIn Scope00:40
Addedcommunity.github.comURLOut of Scope00:40
Addedgithub sparkOTHERIn Scope00:40
AddedcopilotOTHERIn Scope00:40
Addedgithub production credentialsOTHERIn Scope00:40
Addedcopilot spacesOTHERIn Scope00:40
Addedgithub.blogURLOut of Scope00:40
AddedatomOTHEROut of Scope00:40
AddedelectronOTHEROut of Scope00:40
Added*.github.ioWILDCARDOut of Scope00:40
Added*.github.netWILDCARDIn Scope00:40
Addededucation.github.comURLIn Scope00:40
Addedgithub enterprise serverOTHERIn Scope00:40
Addedspectrum.chatURLOut of Scope00:40
Addedgithub classroom assistantOTHEROut of Scope00:40
Addednpm cliBINARYIn Scope00:40
Addedhttp://education.github.com/forumURLOut of Scope00:40
Feb 21, 2026
ChangeAssetCategoryScopeTime
RemovedcopilotOTHERIn Scope21:38
Removed*.github.netURLIn Scope21:38
Removedgithub enterprise cloudOTHERIn Scope21:38
Removedgithub pagesOTHERIn Scope21:38
Removededucation.github.comURLIn Scope21:38
Removedgithub production credentialsOTHERIn Scope21:38
RemoveddependabotOTHERIn Scope21:38
Removedgithub for mobileOTHERIn Scope21:38
Removedgithub cliBINARYIn Scope21:38
Removedcopilot chat on dotcomOTHERIn Scope21:38
Removedcopilot for businessOTHERIn Scope21:38
Removed*.githubusercontent.comURLIn Scope21:38
Removedgithub.comURLIn Scope21:38
Removedapi.github.comURLIn Scope21:38
Removednpmjs.comURLIn Scope21:38
Removednpmjs.orgURLIn Scope21:38
Removednpm cliBINARYIn Scope21:38
Removedgist.github.comURLIn Scope21:38
Removedgithub enterprise serverHARDWAREIn Scope21:38
Removedgithub enterprise cloud with data residency (ghec-dr)OTHERIn Scope21:38
Removedgithub desktopBINARYIn Scope21:38
Removedclassroom.github.comURLIn Scope21:38
Removed*.githubapp.comURLIn Scope21:38
Removedcopilot spacesOTHERIn Scope21:38
Removedcopilot coding agentOTHERIn Scope21:38
Removedgithub sparkOTHERIn Scope21:38
Removedgithub cspOTHERIn Scope21:38