Secure Your Open-Source Project with GitHub
summary
Shows how to secure an open-source project using GitHub’s built-in tooling, specifically demonstrating GitHub SAST (static application security testing) and SCA (software composition analysis) to protect code published to the community. Explains how to configure and use those GitHub features to scan and safeguard repository code, issues and pull-request workflows.
AI-written summary · about
chapters (9)
- 0:00Security introduction
- 3:57Detect exposed secrets
- 11:42Protect commits
- 12:05Static code analysis
- 14:54Vulnerability management
- 19:07Deliverable attestation
- 21:34Strong authentication
- 22:43SBOM and compliance
- 24:09GitHub security lab
related talks
27mBuilding a Secure Open Source Project on GitHub
01h 02mDeveloping secure software with GitHub
41mSecuring the World’s Open Source Software, Together
49mProtect Your Code with GitHub Security Features
39mA Guide to Securing GitHub Based on Lessons Learned
38mFortifying Your Codebase with GitHub
58mProtect your code with GitHub security features
48mAdvanced Security with GitHub without GitHub Advanced Security