Security-First .NET: How GitHub's Tools Protect Your Open-Source Projects Without Slowing You Down

From the creator

As .NET developers, we often focus on features and functionality while security becomes an afterthought. GitHub offers a powerful suite of free security tools that open source .NET developers can leverage immediately to protect their applications. This session goes beyond theory to show you practical, hands-on techniques for integrating Dependency Graph/Review, Dependabot alerts, CodeQL, and Secret Scanning into your everyday .NET workflow. With GitHub Copilot's AI-powered capabilities, you'll discover how to fix security vulnerabilities faster using contextual remediation suggestions. You'll learn how community-driven security practices can help identify vulnerabilities before they reach production, how to effectively manage dependencies with the latest NuGet improvements, and how to leverage the collective knowledge of the .NET ecosystem to build more secure applications. Whether you're building a small open source library or a complex application with Blazor, MAUI, or ASP.NET Core, you'll walk away with actionable security practices you can implement in your projects today—because secure code is quality code, and the open source community deserves both. 🔗 Demo Code: https://gh.io/dotnetconf25-gh-security 🎥 See more from .NET Conf: https://aka.ms/dotnetconf-playlist 🔗 Links: .NET 10 — The most intelligent and unified .NET yet: https://aka.ms/dotnet10/ .NET Aspire 13 — Simplified orchestration for cloud-native apps: https://aka.ms/aspire13/announcement ASP.NET Core 10 — M

Published 2025-11-14 · Watch on YouTube ↗
Availability and playback restrictions are controlled by the original channel.