Protect Your Code with GitHub Security Features in 5 Minutes • Rob Bos • GOTO 2023

From the creator

This presentation was recorded for GOTO Byte-Sized. #GOTOcon #GOTO https://gotopia.tech Rob Bos - Continuously Improving with DevOps READ MORE "Elevating Security Awareness in Software Development with GitHub Features": https://gotopia.tech/articles/273 Check out the full talk: https://youtu.be/1CICkxLKVmE RESOURCES https://github.com/devops-actions/load-runner-info/pull/307 https://github.com/rob-demo/node-authentication-2881188 https://github.com/rajbos/TailwindTraders-Website https://github.com/github/codeql https://sarifweb.azurewebsites.net Rob https://twitter.com/RobBos81 https://github.com/rajbos https://linkedin.com/in/bosrob https://mstdn.social/@Rob_Bos https://devopsjournal.io ABSTRACT Creating modern software has a lot of moving parts. We all build on top of the shoulders of giants by leveraging closed/open source packages or containers that other people have shared. That makes securing our software a lot more complex as well! In this session you'll learn what possible attack vectors you need to look for, how to protect yourself against them and how to leverage GitHub's features to make your life easier! Topics: • Signed Commits • Dependabot updates • Dependency scanning for known vulnerabilities • Secret scanning (and revoking) out of the box • Using CodeQL [...] Download slides and read the full abstract here: https://gotoaarhus.com/2023/sessions/2650 RECOMMENDED BOOKS Liz Rice • Container Security • https://amzn.to/3oU4iJe Liz Rice • Kubernetes Securi

Published 2023-11-07 · Watch on YouTube ↗
Availability and playback restrictions are controlled by the original channel.