2387 Results

Other Content

05/16/25: Vulnerabilities in Android Devices

Google released security updates to address vulnerabilities in Android Devices.For a complete description of the vulnerabilities and affected systems, go to Android Security Bulletin—May 2025.IT SecurityRead more about IT Security service offerings.

How-To

Which GitHub do I use?

When people say “GitHub,” they often mean the public, open-source website www.github.com — where anyone can browse and contribute to millions of public code repositories.But that’s not what we’re talking about here.At UCSF, we offer two secure, enterprise-grade GitHub environments through our UCSF GitHub Enterprise Program — both designed to support your development work safely and effectively:

Choose the right GitHub at UCSF: Use On-Prem for P3/P4 data, Cloud for general dev—both are secure, UCSF-licensed, and free to use.

Landing Page

GitHub Source Control & Collaboration

GitHub (both Enterprise On-Prem and Cloud) provides a secure, and scalable platform for versioning, team collaboration, and integrations. 

At the core of modern software development is effective source control and seamless collaboration — and that's exactly what we support. Whether you're working solo or across multiple teams, our GitHub environments help you track changes, review code, automate workflows, and deliver software with confidence.

We ensure access is smooth, repositories are secure, and workflows are standardized — so you can focus on building great solutions, together.

Need help setting up a repo, managing access, or integrating Actions? We’ve got you covered.

Landing Page

Developer Experience

Welcome to Developer Experience (DevEx) — your partner in optimizing software development across UCSF.

DevEx analyzes the experience, satisfaction, and productivity of developers to uncover where time is wasted and removing friction from a developer’s daily workflow so they can be more effective and happier.


DevOps is how software gets built, tested, deployed, and monitored efficiently, leveraging standard tools and practices.

Together, DevEx and DevOps form a continuous cycle of improvement, where better tools and better experiences lead to better outcomes.

How-To

FAC - Drive Mapping Instructions

Drive Mapping - Windows and Mac InstructionsWindows InstructionsMac InstructionsIt can sometimes be more convenient to map your FAC drive directly to your Windows or Mac device. These instructions will teach you how to do so on both types of devices.  A GlobalProtect VPN connection is required, even if already on UCSF Ethernet OR UCSFwpa.Specific share names and paths are supplied in the FAC email when signed up.

  • Affiliate
  • Research Staff
  • Researcher
  • Staff
  • Student
  • Research Services
How-To

SonarQube - Continuous Inspection of Code Quality and Security

SonarQube is a powerful static code analysis platform that continuously inspects your source code for bugs, code smells, security vulnerabilities, and code duplications. It supports dozens of programming languages and integrates easily with CI/CD pipelines to enforce coding standards and improve long-term maintainability.

SonarQube is a static code analysis platform that continuously inspects your source code for bugs, code smells, security vulnerabilities.

How-To

Cypress: Automated End-to-End Testing for Web Applications

Fast, Real-Time Testing: Tests run in the browser as you write them with instant feedback.Time Travel: See exactly what happened at each step of your test via a visual timeline.Automatic Waiting: No need to add sleep or wait commands — Cypress automatically waits for elements to appear.Debuggable: Developer-friendly stack traces and error messages, with Chrome DevTools integration.Built-in Test Runner UI: A visual dashboard for running and debugg

Cypress is a JavaScript-based end-to-end testing framework built specifically for the modern web. Unlike traditional Selenium-based tools, Cypress operates directly in the browser and runs alongside your application, giving it native access to the DOM, network layer, and browser behavior in real-time.
 

It is ideal for testing everything from individual components to full workflows in single-page applications (SPAs) and enterprise-scale web platforms.