Developer First Security with GitHub Advanced Security

Описание: This session will guide the participants around the different pillars of GitHub Advanced Security (Supply Chain Security, Code Scanning through CodeQL, Secrets Scanning. Discuss and showcase how GitHub's approach of Developer First Security can lead to faster vulnerability identification to faster vulnerability remediation.

How do you think that a Start-up will benefit from this session? The target audience would be able to:

•Understanding GitHub Advanced Security: Overview and Features
•Code Scanning: Detecting Vulnerabilities Early
•Secret Scanning: Protecting Sensitive Information
•DePenda Bot: Keeping Dependencies Up to Date
•Security Policies and Actions: Customizing GitHub Advanced Security
•Use GitHub Copilot to remediate Application Security Vulnerabilities

The session will focus on:
GitHub Advanced Security rollout and deployment strategies and how GHAS can lead to faster detection and remediation of vulnerabilities.

What will the attendees or a Start-up learn from session?
-Learn all the GHAS component rollout strategies and how it can be embedded into the developer workflows.
-Learn how we can implement quality gating and ensure that you have clean code.
-Also learn how using AI can assist in faster vulnerability remediation and fix cycles.

Speaker Bio - Abhishek Dutta is working as a Senior Security Architect with the GitHub Expert Services team. His day to day role requires him working with Application Security teams and developers to reduce any friction between appsec and devs by making application security tooling integration frictionless within the developer workflows. Abhishek has 15+ years of industry experience working as a developer and security practitioner.

Social Handle of the speaker-   / abhishek-dutta07  

Pre-requisites:
https://learn.microsoft.com/en-us/col...
https://docs.github.com/en/get-starte...

[eventID:21271]