Deliver Secure Software with Azure Devops & Github

on YouTube ↗20m

" summary

Overview of concrete tooling and outcomes: shows GitHub Advanced Security catching dependency and code issues as soon as code is committed — dependabot alerts flags a high‑severity MongoDB vulnerability that requires manual resolution; CodeQL code scanning flags an unsafe HTML expansion that can cause XSS; secret scanning finds hardcoded credentials and scans full git history. Demonstrates CI/CD with GitHub Actions using a Maven workflow and a one‑click Azure Web App deploy; mentions 20+ event triggers and ~70 ready‑to‑use Azure actions.

AI-written summary · about

" chapters (6)

1. 0:00Introduction to secure software delivery
2. 3:16Inner source collaboration in GitHub
3. 5:23GitHub Advanced Security demo
4. 11:10Workflow automation with GitHub Actions
5. 14:50Azure monitoring and DevOps tools
6. 18:28Resources and closing remarks

" related talks

• 55mGitHub + Azure: Better Together!April Edwards · NDC London 2023
• 46mShip-It safely with GitHub Advanced SecurityJoseph Katsioloudes, Bryan Sullivan, Lara Goldstein, Nicolas Couraud, David Trigano, Rachelle Johnson, Mike Kippen · Microsoft Build 2023
• 36mEnabling DevSecOps best practices with GitHub ActionsUSHA NARAYANABHATTA · AzConf 2020
• 44mAzure DevSecOpsPeter De Tender · PowerShell + DevOps Global Summit 2022
• 01h 02mDeveloping secure software with GitHubLaura Kokkarinen, Thomas Vochten · NDC Security 2024
• 48mGitHub + Azure: Better Together!April Edwards · NDC Porto 2023
• 56mSeamlessly integrate security throughout your code to cloud workflowBrendan Burns, Steven Murawski, Rita Zhang, Bryan Sullivan, Levent Besik, Ankur Patel, Paige Boggie, Adria Martin, Joseph Christianson, Nicolas Couraud, Collin Davis, Santosh Kumar Panchapakesan, David Trigano · Microsoft Build 2023
• 41mBake Security into your workflow with GitHub Advanced Security and AIMadison Oliver, Justin Hutchings, Thomas Corrigan · Microsoft Build 2024