GitHub status: access issues and outage reports
No problems detected
If you are having issues, please submit a report below.
GitHub is a company that provides hosting for software development and version control using Git. It offers the distributed version control and source code management functionality of Git, plus its own features.
Problems in the last 24 hours
The graph below depicts the number of GitHub reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.
At the moment, we haven't detected any problems at GitHub. Are you experiencing issues or an outage? Leave a message in the comments section!
Most Reported Problems
The following are the most recent problems reported by GitHub users through our website.
- Website Down (56%)
- Errors (31%)
- Sign in (13%)
Live Outage Map
The most recent GitHub outage reports came from the following cities:
| City | Problem Type | Report Time |
|---|---|---|
|
|
Errors | 7 hours ago |
|
|
Website Down | 13 days ago |
|
|
Sign in | 13 days ago |
|
|
Errors | 13 days ago |
|
|
Errors | 13 days ago |
|
|
Website Down | 13 days ago |
Community Discussion
Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.
Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.
GitHub Issues Reports
Latest outage, problems and issue reports in social media:
-
Karthik (@kartikktwt) reportedUntil this point I thought PR merge bots only exists for convenience a trusted user comments /lgtm /approved in a PR and a merge bot just merges it nice and clean i thought, but its more than that. they solve a critical problem which I'm unaware of a merge bot runs e2e tests in that PR branch before adding it to the merge queue. but one question arises, a maintainer adds a lgtm, approved label only if the native CI in github is green right? then why do we have to run tests again? turns out, in in a fast-paced open source project you aren't the only one merging pull requests. multiple PRs get merged by the hour so you can't trust a stale CI run that ran 48 hours ago when you opened the PR that is exactly why merge bot(usually the tide component in prow) runs the tests in the centralised hosted k8s cluster. only if it reports success, the PR gets added to the queue. why queue tho?(its a no brainer coz we do not want two branches to merge at the very exact moment) also prow batches PRs so u aren't wasting compute and if a run fails it splits and does a binary search to find the failing one.
-
caro lllll (@frijaena05xx) reported@CollabPGuy @DaGamah_ github can have malware however they usually take it down quickly when detected
-
Shii (@ShiiMapping) reported@mismagismagius Maybe export logs very shortly after this happens and send it to em with a GitHub issue or in the help channel of the official osu discord Feel like this is smth that'd flag up somewhere in runtime log or smth
-
Julian Goldie SEO (@JulianGoldieSEO) reportedOpenViking is a free memory system for AI agents that cut token use from 34 down to 9 on their tests. Here's why it's cheaper than what most people use. It saves everything in three layers. A one-line summary, a bigger overview, and the full thing. Your agent reads the one-liner first. If that's enough, it stops there. It only digs deeper when it actually needs to. Compare that to a normal notes vault where the agent searches the whole database every time. It's also self-improving. After each session it pulls out what it learned and files it away as new memory. Runs locally. Free and open source. Installing it is easy. Grab the GitHub link and the docs page, paste both into Claude, and say "set this up with Hermes." It handles the rest. Two things to know. It came out of ByteDance, and the AGPL license means personal and internal use only. You can't build something you sell on top of it. Want the SOP? DM me. 💬
-
David Villegas (@labsdvx) reported@lennysan @bot Best use case is a chief of staff for a developer with a 5 year old going back to school. I don’t need a bot that shops on Amazon. I need one that stops me from being the middleman between GitHub and kindergarten. In the morning it checks GitHub and my email, tells me which PRs actually need me, if CI is broken, and drafts replies in my voice. Nothing goes out unless I say so. If a meeting is going to make me late for pickup, I want to know before I find out the hard way. At night it reads the kindergarten emails. Forms, supplies, allergy notes, who picks him up. One simple list. It puts the dates on the family calendar and invites my partner. It never writes to the teacher, never signs, never pays. After he is asleep I get twenty minutes. Either it quizzes me on the PR I didn’t finish, or it helps me explain whatever he asked at dinner in words a 5 year old actually gets. Grok puts it in front of me. I decide. That is the hour I want back.
-
Eric (@ericwithcoffee) reportedOne of the biggest issue with @bot is that it doesn't seem you can give each bot its own accounts, or even give a separate github account than what's linked to your Cursor account.
-
Faizan (@codoyevskyy) reportedA guy was checking my GitHub, saw that I had one docs fix in llm-d, and told me, “Bro, contribute to good projects. wtf is this llm-d?”
-
vechen (@miu21590) reported@eikkien Could you double-check that every setup step completed successfully? If it still gets stuck on “Reconnecting…”, please open the Launcher, click Save Log, and attach the generated file to a new GitHub issue. I’d really appreciate it, it should help me identify the cause.
-
Michael Okeje (@michaelokeje) reported@lennysan @bot I built an SEO agent that connect to my search console, found core issues, fixed it and then updated my GitHub. I have done some project but this to me is the best as it solved a 5/6 month problem.
-
Mert Hurturk (@merthurturk) reportedTried @cursor_ai after Claude's limit changes. Connected GitHub, asked the agent to debug issue #276. Cloud env spun up fine... but the agent can't read GitHub issues. PRs, yes. Issues, no. Am I supposed to paste the issue body in manually? What am I missing?
-
hbb (@BIGBULLapp) reported@github GitHub Issues added five ways to rearrange graves. Pin views, hide closed sub-issues, density settings. The sidebar is now a customizable cemetery. The open issues are still on fire.
-
Dante Lopez (@dqlopez) reportedMy Grok Bot PR reviewer: - I have it install Pi then login my Codex/Cursor subs - Give it own Github account and access to my org repo - Setup routine to watch new PR or changes (each repo) - Initiate PR review based on my custom prompts and skills load - Post Github review, slack post notif for team and notify me back on Grok desktop/app Neat. Doesn't consume much usage.
-
Rakib Hossen (@rakib_hossen_ai) reported@sauda_coder GitHub is seriously underrated for non-developers. 🔥 Knowing how to search, evaluate, and install open-source projects can save both time and money. The “search for the problem, not the tool” mindset is especially useful.
-
AiMind (@AIMind_Ai) reported3 websites replace 20 hours of googling when you build a home server. The hard part of self-hosting is not the hardware. A used HP EliteDesk and a wall-mounted NAS cost almost nothing. The hard part is not knowing what you can even run, or how to avoid breaking the system on the first command. The first keeps a catalogue of self-hosted alternatives. Look up a replacement for Google Photos, Dropbox, or Notion, and you see what already exists, how many GitHub stars it has, and whether it is still alive. Plus a weekly digest of what shipped. The second lets you run any Linux distro straight in the browser. Arch, Debian, Alpine, Bazzite. Click once, and you are inside a live system, with no evening lost to a USB stick and a real install. The third handles the worst part. Install scripts for Proxmox: Immich, Jellyfin, Vaultwarden, AdGuard, Nginx Proxy Manager. Paste one line into the console and the container comes up on its own. Immich shows 17,735 installs; Docker 36,408. Each of those services used to cost an evening of documentation and three Stack Overflow tabs. Now it is one command. The hardware takes an hour to buy. These 3 bookmarks save you a month. Names in the replies.
-
swayam (@swymbnsl) reportedI made my first 1,00,000 INR back in 2023, selling a NFT collection on Canto Blockchain. Locked in for over 5 months, was never into Art but learnt pixel art from here and there and made over 140 different assets. Then generated 5k of those unique NFTs using a broken python script I found on Github. Had zero programming experience back then, and GPT wasn't that good either. Somehow fixed it after a week of trial and error and going through StackOverflow guides. There used to be a very famous Node.js script by Hashlips but it didn't work on my 32bit potato pc. Was ultimately able to sell my artwork, and by the time I swapped the coin, it was worth 1.13L All this for JEE coaching fee cause we weren't able to afford it back then
-
@overtorment (@overtorment) reportedI have just decompiled IPA app binary from Apple Appstore of a fresh new bitcoin wallet. It has obfuscated seed exfiltration to 3rd party server. Literally a few lines difference from the published Github source.
-
August Wittorp (@brick4956) reported@oprydai If he didnt have in early march I already had this published on my github repository Been doing some serious harness engineering around scientific AI. The basic architecture is: Python scientific core + Snakemake + uv + reproducible containers + pytest/Hypothesis + Ruff/mypy/Pydantic + HDF5 + RO-Crate + SLSA/Sigstore + read-only RAG + ParaView + OpenUSD + SALib/OpenMDAO + FEniCSx + selective Rust + FMI later. The point isn’t to throw a bunch of tools together. I’m separating responsibilities so no single part of the system—especially the AI—gets to both produce a scientific result and declare that result trustworthy. The Python layer contains the actual numerical physics. uv locks the environment, Pydantic governs scientific schemas and parameters, Ruff/mypy catch structural problems, and pytest/Hypothesis test both software behavior and physical invariants such as conservation, bounds, convergence and impossible states. HDF5 stores the actual scientific outputs, while Snakemake makes the computational dependency graph explicit rather than hiding the whole experiment inside one giant script. Above that is a separate trust/reproducibility layer. Containers capture the execution environment, RO-Crate records provenance, and SLSA/Sigstore plus detached hashes make it possible to verify where an artifact came from and whether it has been altered. The AI side is deliberately separated from scientific authority. Gemini/RAG can retrieve evidence, reason about failures, suggest parameter changes, propose models and generate candidate modifications—but it cannot silently change authoritative scientific state or certify its own result. Conceptually I’m aiming for: AI proposes → deterministic computation executes → independent verification decides. FEniCSx is also there as an independently implemented numerical benchmark rather than letting the primary solver effectively validate itself. SALib/OpenMDAO handle sensitivity and optimization, ParaView handles scientific fields, OpenUSD represents the machine/system, Rust is reserved for places where it actually buys something, and FMI comes later for external model coupling. I’ve had two different reactions to this architecture. One is that treating reproducibility as a first-class requirement is exactly what serious scientific AI needs. The other is that the minimum stack should stay closer to Python + uv + pytest + HDF5 initially, with workflow/provenance/supply-chain infrastructure added as complexity demands it. I think there’s probably a distinction between the right end-state architecture and the right implementation order. Curious how others building Gemini/agent systems are handling this boundary: where do you draw the line between what an agent is allowed to propose and what it is allowed to treat as authoritative?
-
Sanjay (@sanjaynela) reported@Atulya_Techie U can use Vercel for server to host your website and to host privacy documents. And its free. Or you can use github pages for hosting websites too
-
JoeGeiser | 🟦 (@GeiserJoe2) reportedTwo AI agents disagree about whether a job was done. Who decides? Every agent rail ships the happy path x402, ERC-8004, A2A, AP2. None of them ships the dispute. So we're building AI juries. I built one on GenLayer. The jury isn't the weak link. Controlled run. Same contract, same claims, same validators. I changed one thing: the evidence URL. → GitHub HTML page: unanimous agreement, wrong on all 3 claims. Repeated, same result. → Same repo, commit-pinned API artifact: unanimous, and correct. The failure was mundane. The first 6,000 characters of a GitHub page are navigation chrome, not the file list. The jury reasoned perfectly over the wrong bytes and agreed with itself. Consensus guarantees agreement. It does not guarantee truth. The fetch layer decides which one you get. So: Exhibit an admissibility standard for machine disputes. • Evidence must be content-hashed or commit-pinned. Mutable URLs rejected at submit, not argued about later. • Size-checked before a jury is convened, not after. • No free text in anything the network has to compare. I've watched verdicts identical in substance fail consensus over a "reason" field. Bad evidence gets rejected up front instead of becoming a confident wrong payout. Agents are about to settle trillions. Every dispute adjudicated against a page that can change is a wrong verdict waiting to be paid. Fix the evidence layer and the judge takes care of itself. @GenLayer #AgentTank
-
Zeeshan Akhtar (@zee_eivish) reported@github support is taking a long time to answer tickets, they have some issue with the payment system which is why not able to upgrade. Not sure why they would keep the payment flow so long unattended.
-
swayam (@swymbnsl) reportedI made my first 1,00,000 INR back in 2023, selling a NFT collection on Canto Blockchain. Locked in for over 5 months, was never in Art but learnt pixel art from here and there and made over 140 different assets. Then generated 5k of unique NFTs using a broken python script I found on Github. Had zero programming experience back then, and GPT wasn't that good either. Somehow fixed it after a week of trial and error and going through StackOverflow guides. There used to be a very famous Node.js script by Hashlips but it didn't work on my 32bit potato pc. Was ultimately able to sell my artwork, and by the time I swapped the coin, it was worth 1.13L All this for JEE coaching fee cause we weren't able to afford it back then
-
bbsz (@blackbigswan) reportedIt is not how that works and spreading FUD doesn't help. In this case - You need to infect yourself with malware (infostealer) beforehand. The malware can arrive as part of your GTA6.exe download or through fake google ad when you searched for 'Claude Code' and executed curl | bash from attackers controlled server, or in hundred different ways. The moment malware hits your device it can do 'whatever', including editing SKILL.md, spreading malicious payloads through your compromised GitHub account, setting a custom man-in-the-middle server to grab all your prompts from Claude/Cursor/Whatever™ and inject with Whatever™ or simply exfiltrate your Anthropic credentials. We've seen all of it in the wild. The only difference with today's FUD is that Anthropic actually did something about it and informed you of compromise. Which is nice and fine. What you should be really scared of is: a) not reading the code Claude installs and executes b) using shady MCPs, Skills and plugins c) not using any form of isolation for code execution d) blindly executing curl commands that pipe to bash/zsh For example, if you managed to not infect yourself with GTA6.exe, it is far more likely you are pointing Claude to install code from GitHub repository notmalware/totally-safe-11 or using shady MCP servers on bare metal that will ultimately be your demise. Claude tries to review the code it pulls, but it's a probabilistic machine and it is very easy to hide the malicious code from LLM (as easy as bloating it in size so LLM wouldn't be able to parse it, similarly, Claude does not review the contents of imports).
-
David Villegas (@labsdvx) reported@niccruzpatane @bot Best use case is a chief of staff for a developer with a 5 year old going back to school. I don’t need a bot that shops on Amazon. I need one that stops me from being the middleman between GitHub and kindergarten. In the morning it checks GitHub and my email, tells me which PRs actually need me, if CI is broken, and drafts replies in my voice. Nothing goes out unless I say so. If a meeting is going to make me late for pickup, I want to know before I find out the hard way. At night it reads the kindergarten emails. Forms, supplies, allergy notes, who picks him up. One simple list. It puts the dates on the family calendar and invites my partner. It never writes to the teacher, never signs, never pays. After he is asleep I get twenty minutes. Either it quizzes me on the PR I didn’t finish, or it helps me explain whatever he asked at dinner in words a 5 year old actually gets. Grok puts it in front of me. I decide. That is the hour I want back.
-
Scott Robinson (@ScottWRobinson) reported@SamuelRome97104 Spotted GitHub reliability issue
-
FixxTheMoney (@FixxTheMoneyy) reported@Nih_Noh @ryanlanman1 @clay_garrett The hardware device is offline and generates key locally. The server key is created by them in their Secure Enclave. Where you have a sound gripe is the app key. The threat is Block could push a malicious update to steal app keys resulting in them having a quorum. The issue is null for Android users. You can verify the hash of the app is the exact code they pushed from their GitHub. The problem lies in iPhone users being unable to verify the code via hash. Apple doesn’t allow it. So you have to trust the iPhone app on your phone matches their source code…
-
Rhys (@RhysSullivan) reported@aarondfrancis Across the board are you using a mix of loading secrets from 1password and setting them in Executor or one or the other? Then for GitHub, was it the GitHub API / GraphQL / MCP server? If it's an MCP you OAuth to then it'd be unrelated to 1password so narrowing it from there
-
Djamé.. (@zehavoc) reported@mmitchell_ai Thinking that all the sleeper agents training data set are in GitHub… What else is lying down there?
-
Architect Ilyas (@ilyaskazi) reportedTypes of Authentication Methods and Protocols * Password-based Authentication: The traditional method requiring a unique username matched against a securely hashed password stored on a server. * Multi-Factor Authentication (MFA): A security mechanism requiring users to provide two or more distinct verification factors from different categories (e.g., a password plus an authenticator app code). * Two-Factor Authentication (2FA): A specific subset of MFA that strictly requires exactly two independent verification factors. * Passwordless Authentication: Systems that replace traditional passwords entirely with cryptographic keys (FIDO2/WebAuthn), hardware tokens, biometrics, or magic links. * Token-based Authentication: A stateless approach where a server issues a signed token (such as a JSON Web Token or JWT) after initial verification, which the client then includes in subsequent requests. * Certificate-based Authentication (CBA): A mechanism utilizing digital certificates (X.509) exchanged between a client and server to cryptographically verify identity, frequently used in enterprise environments and API security. * Single Sign-On (SSO): An authentication session process allowing a user to use a single set of credentials to access multiple independent applications, typically implemented via protocols like SAML, OpenID Connect (OIDC), and OAuth 2.0. * Federated / Social Authentication: Delegating user verification to an external identity provider (such as Google, Apple, or GitHub) via trust relationships and standard authorization protocols. * Adaptive / Risk-based Authentication: Dynamic security that adjusts required verification steps based on real-time risk assessment, such as detecting an unfamiliar login location, unusual access times, or anomalous device footprints.
-
Tarun Agarwal (@tarunag10) reported@niccruzpatane @bot I’d use Grok Bot as a Product Signal Agent. It would continuously watch customer feedback across X, support email, and GitHub, cluster repeated pain points, validate whether they’re real problems, and rank them by frequency + potential impact. Then every morning it gives me one thing worth building, with the evidence, a mini PRD, acceptance criteria, and a ready-to-open GitHub issue. Basically: turn scattered customer noise into a shippable product decision every day.
-
Phil Hie (@philhie) reported@github hide closed sub-issues alone will clean up half my boards lol