Security as Code - A DevSecOps Approach
Explore DevSecOps and Security as Code with CodeQL. Learn to implement security checks, detect vulnerabilities, and foster collaboration between development and security teams for a robust security culture.
GitHub Copilot and Advanced Security - A Quick Tour
Explore GitHub Copilot's AI-powered development capabilities and GitHub Advanced Security's tools for identifying and fixing vulnerabilities, with live demonstrations and insights on enterprise applications.
Discover Vulnerabilities with CodeQL
Explore CodeQL's static and taint analysis capabilities to uncover vulnerabilities, including potential RCE flaws. Learn key concepts for effective code analysis and security testing.
Protect Your Code with GitHub Security Features
Learn to protect your code using GitHub's security features, including signed commits, Dependabot, vulnerability scanning, secret detection, and CodeQL for comprehensive software security.
CodeQL - Also a Powerful Binary Analysis Engine
Unveiling CodeQL's potential as a binary static analysis tool, exploring its engine capabilities and applications beyond traditional static analysis for enhanced software security.
Securing Code with the Python Type System
Explore how Python's type system can enhance code security, from simple annotations to advanced tools, preventing vulnerabilities and enabling incremental improvements in project safety.
Event-based Fuzzing, Patch-based Research, and Comment Police - Finding Bugs Through a Bug
Discover innovative bug-hunting techniques: event-based fuzzing, patch analysis, and comment inspection. Learn to leverage known vulnerabilities for deeper security research in Chrome and Android.
Security as Code - A DevSecOps Approach
Explore Security as Code methodology, integrating security into CI/CD pipelines for continuous vulnerability detection. Learn to implement CodeQL queries for early identification of security issues.
GitHub Advanced Security: Securing the World's Software - Lecture
Explore GitHub Advanced Security's approach to empowering developers in securing software through code scanning, secret scanning, and supply chain security, with insights on AI integration.
Actions in the Wild: Usability and Ease of Use of Open Source Security Tools
Discover how to implement and optimize open-source security tools in software development, focusing on vulnerability analysis, CVE scoring, and automated GitHub security actions.