Sourcegraph | Blog

Poisoned LiteLLM packages on PyPI started stealing credentials. Using Deep Search and Code Search, we traced which public repos were protected by version pinning and which were left exposed. Here's how—and how you can do the same for any supply chain incident.

We are excited to announce our transition to a community-driven open source project. While making this change, we reaffirm our deep commitment to remaining active members of the community.

While direct API calls seem cheaper and easier, they lack the safety layer large organizations rely on. Tool connection protocols aren't dead; they remain vital for security, governance, and centralized control in big teams.

The hidden cost of being a data-driven company is context-switching for analysts due to "quick questions." DataBot allows the data team to focus on auditing analysis instead of performing it.

Introducing the new Sourcegraph changelog, rolling out with the release of Sourcegraph 6.12 to better highlight exciting new improvements and features. Learn more about the new changelog and the future of Sourcegraph updates.

Millions of hardcoded secrets are pushed to public repositories every year, making credential leakage a leading cause of data breaches. This complete guide explains how to prevent these leaks, compares popular detection tools, and details the layered strategy required to secure your entire enterprise codebase.

Developer experience is the key competitive advantage for engineering leaders in 2026, enabling higher retention and faster delivery by eliminating tooling friction. Dive into our comprehensive guide comparing the 12 best DevEx tools across six critical categories—from code search to developer portals and metrics to build your unified DevEx stack.

Our new CEO, Dan Adler, reflects on the evolution of code search and shares our strategic vision for supporting deep code understanding to both developers and AI agents.