~/talk

Seamlessly integrate security throughout your code to cloud workflow

Talkat Microsoft Build 2023 · 2023-05-23..05-25· [security, devops-and-delivery]

speakers

name:Levent Besik

links:none on file

name:Paige Boggie

links:none on file

name:Brendan Burns

bluesky:brendandburns.bsky.social

name:Joseph Christianson

links:none on file

name:Nicolas Couraud

links:none on file

name:Collin Davis

links:none on file

name:Adria Martin

links:none on file

name:Steven Murawski

links:none on file

name:Santosh Kumar Panchapakesan

links:none on file

name:Ankur Patel

links:none on file

name:Bryan Sullivan

links:none on file

name:David Trigano

links:none on file

name:Rita Zhang

github:ritazh

resources

video:https://youtu.be/KK5hnqFUuZE

slides:none on file

summary

Announcement shows GitHub Advanced Security for Azure DevOps in public preview with CodeQL finding real SQL and path‑traversal bugs, Dependabot surfacing Log4j, and secret scanning that rejects pushes so credentials never land in repos. Container pipeline demo uses Trivy + Copa + Notation to scan, patch and sign images, Gatekeeper + Ratify to block unsigned images, and Defender for Cloud surfaces ~800 vulns across nine images plus attack‑path prioritization. Identity demos reveal Microsoft Entra External ID public preview and Verified ID Wallet SDK GA with passwordless flows and selfie‑match verification.

AI-written summary · about

chapters (7)

related talks