Live data from Hacker News

Anyone else get a vague GitHub shakedown notice?

lists.osgeo.org

31–40 of 51 posts

Re: Anyone else get a vague GitHub shakedown notice?

#31

I'm a GitHub admin. Did not receive this e-mail. We don't have the GitHub Code Quality feature enabled anywhere, though. The e-mail seems clear: Someone enabled the feature in the organization. The feature was in free preview, but the free preview is ending. If they leave it enabled, it will be billed at the new rate. It's pretty clear that "organization" is being used throughout the e-mail, so they're not referring…

How can you possibly bill someone without billing information?

Re: Anyone else get a vague GitHub shakedown notice?

#32

Earlier quoted context omitted.

Huh? Just to make sure I wasn't missing something, I checked and my GitHub account has only a TOTP app and hardware security key configured, no SMS/phone number. As a matter of fact GH even has a red "Less secure" badge on the SMS 2FA in the settings discouraging its use, as well as the following text in the description: "We strongly advise against using SMS because it is susceptible to interception, does not provide…

This option must have been added later.

U2F was always an option, because I used it since they added the MFA requirement (and like others here never gave Github my phone number). I think TOTP was also available from the start. The warning to not use SMS for MFA might have been added later.

Re: Anyone else get a vague GitHub shakedown notice?

#33
post #14
post #9

This links to this, which says https://docs.github.com/en/code-security/concepts/about-code... > GitHub Code Quality is currently in public preview and will become generally available on July 20, 2026. During public preview, Code Quality scans will consume GitHub Actions minutes but you will not be billed for other usage. From July 20, 2026, usage will incur additional charges. See GitHub Code Quality billing. >If yo…

It's probably now called CoPilot Code CoPilot Quality CoPilot™. Do you see that anywhere in your settings?

If you don't, be sure to enable the `tool_search_tools_regex` ... tool.

Re: Anyone else get a vague GitHub shakedown notice?

#34
post #11

Earlier quoted context omitted.

Sending a billing notification to someone who has no billing information on file, but is part of an organization where someone probably enabled that beta feature ("You're receiving this because your organization is using the GitHub Code Quality public preview.") isn't a shakedown.

Christ it's the airport bellhop scam: Someone appears, gives you a service unprompted(carries your bag of spams some AI code reviews), them later demands payment.

You don’t have to pay if you stop using the feature. This is a huge nothing-burger.

Re: Anyone else get a vague GitHub shakedown notice?

#35
post #31

I'm a GitHub admin. Did not receive this e-mail. We don't have the GitHub Code Quality feature enabled anywhere, though. The e-mail seems clear: Someone enabled the feature in the organization. The feature was in free preview, but the free preview is ending. If they leave it enabled, it will be billed at the new rate. It's pretty clear that "organization" is being used throughout the e-mail, so they're not referring…

How can you possibly bill someone without billing information?

> GitHub Code Quality is available for organization-owned repositories on GitHub Team and GitHub Enterprise Cloud plans.

Both of those are paid plans, so the billing information available. As the message says, this email is not for individual user, but rather for github org admin. I guess someone made the poster an admin, they are receiving admin-only messages and are freaking out now?

Re: Anyone else get a vague GitHub shakedown notice?

#36
post #31

I'm a GitHub admin. Did not receive this e-mail. We don't have the GitHub Code Quality feature enabled anywhere, though. The e-mail seems clear: Someone enabled the feature in the organization. The feature was in free preview, but the free preview is ending. If they leave it enabled, it will be billed at the new rate. It's pretty clear that "organization" is being used throughout the e-mail, so they're not referring…

How can you possibly bill someone without billing information?

> How can you possibly bill someone without billing information?

The person is confused. They're not getting billed.

The organization's responsible billing contact would get billed.

This feature can't even be enabled on free, personal accounts.

Re: Anyone else get a vague GitHub shakedown notice?

#37
post #31

I'm a GitHub admin. Did not receive this e-mail. We don't have the GitHub Code Quality feature enabled anywhere, though. The e-mail seems clear: Someone enabled the feature in the organization. The feature was in free preview, but the free preview is ending. If they leave it enabled, it will be billed at the new rate. It's pretty clear that "organization" is being used throughout the e-mail, so they're not referring…

How can you possibly bill someone without billing information?

Its just a normal letter containing the details on what to expect, its more of a heads-up than a shake down to me. If the billing information is not there and account still continue to use the feature then the account would be disabled or something similar. Question is, should the email have all the if-else situations, probably not feasible.

Re: Anyone else get a vague GitHub shakedown notice?

#38
post #5

What about this email is a "shakedown"?

The part where it says they are about to start taking your money?

That featur is opt-in: someone had to check a checkbox somewhere to enable it.

And yeah, that how the businesses work: you opt-in to feature, then you start paying for it. Sometimes the latter part is delayed, in which case it's a good style to send heads-up email about it. Nothing unusual or scammy about it.

Post reply on HN