Living in AppSec - Promised, Fantasy, or Wonderland? - 2019
Explore GitHub's AppSec practices, successes, and ongoing challenges in creating an ideal security environment for application development.
Remediating XSS in GitHub Open Source Projects - Lessons Learned
Insights on scaling XSS remediation across GitHub open source projects, focusing on risk reduction, adding security controls, and automating code modification for diverse applications.
OWASP SEDATED - Preventing Sensitive Data Disclosure in GitHub Commits
Prevent sensitive data leaks to GitHub with SEDATED, an analyzer that catches and blocks commits containing user credentials or tokens before they're pushed.
Board Farms for Everyone - Making Hardware Debugging Easier and Sharing Boards Across the Globe
Discover how to create a board farm for remote hardware debugging, simplifying development and enabling global collaboration. Learn practical tips for setup, integration, and efficient device management.
Authenticating Supply-chain Metadata - Building Remote Code Attestations on GitHub
Explore techniques for authenticating supply-chain metadata and building remote code attestations on GitHub, enhancing software security and integrity in the development process.
What Role Do Package Registries Have in Securing the Supply Chain?
Explore the critical role of package registries in supply chain security, focusing on their impact, challenges, and best practices for enhancing software integrity and reliability.
Open Source Cybersecurity - Addressing Challenges in Software Security
Explore open source cybersecurity challenges and solutions with industry experts, discussing survey findings, enterprise impacts, and automation strategies for improved software security.
Building SLSA 3 Conformant Attestors for Artifacts Generated on GitHub
Learn to create SLSA 3 compliant attestors for GitHub artifacts, enhancing software supply chain security with minimal effort using recent framework extensions.
Securing Your Container Native Supply Chain with SLSA, GitHub and Tekton
Practical guide to securing container native supply chains using SLSA principles, in-toto attestations, and step-by-step demos for achieving SLSA Level 2 in Tekton and Github Actions.
Cyber Gym: Open-source Security Labs in Google Cloud
Hands-on Google Cloud environment for cybersecurity training, offering customizable workouts mapped to industry standards. Flexible for instructors and students, with automated assessment and scalable deployment.
Where Does Your Software Really Come From - Artifact Attestations and Open Source Verification
Explore GitHub's Artifact Attestations: a new capability for verifying open source software origins, enhancing transparency and security in the OSS ecosystem.
Gaining Initial Access by Exploiting Leaked Credentials
Explore how attackers exploit leaked credentials to breach organizations and learn effective prevention strategies for safeguarding sensitive information.
Unpacking Open Source Security in Public Repositories
Explore open source security challenges in public repositories and learn strategies to mitigate risks in cloud-native environments.
The SaaS-y Side of Incident Response - Key Log Sources for Okta, GitHub, and Salesforce
Explore key log sources for Okta, GitHub, and Salesforce in cloud-based incident response. Learn to interpret SaaS logs, avoid common pitfalls, and improve detection strategies for effective security management.
Secure Boot Vulnerabilities and Private Key Leaks - Implications and Solutions
Explore recent security breaches, their implications, and learn how to protect yourself online using two-factor authentication and tools like YubiKey.
Removing AWS Policy Review Fatigue with Automated Terraform Resource Analysis
Automate AWS policy control with Terraform resource analysis, reducing security review fatigue and improving developer productivity through early-stage static analysis in IaC pipelines.
Malicious Packages and Malicious Intent - Episode 123
Explore malicious attacks, open source security, and practical tips for improving company safety with Liran Tal, director of developer advocacy at Snyk and Github Star.
DevSecOps Connect - Integrating Security in Development and Operations
Explore DevSecOps principles, secure serverless architectures, enhance WordPress security, and fortify Dart/Flutter projects. Gain insights from industry experts and network with professionals.
Automating Yocto Layer Maintenance with Cloud Managed Services - Thomas Roos
Automate Yocto layer maintenance using cloud services to save time, upgrade software, test recipes, and backport changes efficiently.
Data Processing Fundamentals - Extended Filtering with Multiple Datasets
Learn advanced data filtering techniques in Python, including category-based filtering, handling multiple datasets, and optimizing code with inline methods for efficient data processing.
Excel to Simple Web Dashboard in R with FlexDashboard and Hosting on Hugging Face Spaces
Learn to create a simple web dashboard in R using FlexDashboard, transforming Excel data into an interactive visualization, and deploy it on Hugging Face Spaces for easy sharing and accessibility.