Fortifying Your Codebase with GitHub
summary
Shows concrete steps to reduce supply‑chain and code risks using GitHub features: enable the dependency graph and Dependabot (configured via dependabot.yml) to auto‑open PRs, use dependabot grouped updates to cut noisy PRs, and expect repositories to trigger builds when security updates land; cites that over 90% of CVEs disappear from newer dependency versions and that push protection blocks 17,000 credentials in a year. For code scanning, build a CodeQL database, produce SARIF results, upload them to GitHub Advanced Security, and gate pull requests.
AI-written summary · about
chapters (10)
- 0:00intro
- 1:43preamble
- 2:08about travis
- 2:30what is developer experience?
- 3:53coding reality
- 6:50github feature releases
- 7:19security & tooling
- 9:07dependabot
- 22:03advanced security
- 37:50thank you
related talks
30mSecuring the software supply chain together
27mBuilding a Secure Open Source Project on GitHub
49mProtect Your Code with GitHub Security Features
58mProtect your code with GitHub security features
42mProtecting Your GitHub from Supply Chain Attacks
01h 02mDeveloping secure software with GitHub
41mBake Security into your workflow with GitHub Advanced Security and AI
52mSecurity as Code: A DevSecOps Approach