Ship-It safely with GitHub Advanced Security
summary
GitHub Advanced Security for Azure DevOps is now in public preview and shows concrete results: repository scans historically find secrets (this demo finds four exposed secrets) and push-time secret scanning rejects commits with credentials so fixes are quick instead of weeks of rotation, noting the claim that ~80% of web breaches involve exposed creds. Dependency scanning runs in build context (example inventory finds 276 NuGets) and CodeQL provides deep SAST queries via CodeQL static analysis; pricing mirrors GitHub Advanced Security at $49 per active committer and signup is at aka.ms/advancedsecurity-signup.
AI-written summary · about
chapters (11)
- 0:00Introduction and Overview
- 1:45Why GitHub Advanced Security
- 5:31Demo: Secret Scanning
- 10:50Demo: Push Protection
- 12:53Advanced Secret Scanning Tips
- 16:34Demo: Dependency Scanning
- 20:47Demo: Code Scanning with CodeQL
- 24:37Pricing and Availability
- 26:43Integration with Defender
- 30:05Demo: Copilot for Security
- 44:32Conclusion and Next Steps
related talks
01h 02mDeveloping secure software with GitHub
20mDeliver Secure Software with Azure Devops & Github
41mBake Security into your workflow with GitHub Advanced Security and AI
11mGitHub Advanced Security and GitHub Copilot: Working together to make security
44mAzure DevSecOps
54mFrom App Security to Dev Security – Shift left with GitHub Advanced Security
49mProtect Your Code with GitHub Security Features
01h 41mDevSecOps with GitHub Advanced Security (GHAS)