Protect Your Code with GitHub Security Features
GOTO Aarhus 2023

Wednesday May 24
10:50 –
11:40
Rampen

Protect Your Code with GitHub Security Features

Slides:


This video is also available in the GOTO Play video app! Download it to enjoy offline access to our conference videos while on the move.

Available in Google Play Store or Available in Apple App Store




Creating modern software has a lot of moving parts. We all build on top of the shoulders of giants by leveraging closed/open source packages or containers that other people have shared. That makes securing our software a lot more complex as well!

In this session you'll learn what possible attack vectors you need to look for, how to protect yourself against them and how to leverage GitHub's features to make your life easier!

Topics:

  • Signed Commits
  • Dependabot updates
  • Dependency scanning for known vulnerabilities
  • Secret scanning (and revoking) out of the box
  • Using CodeQL