Bake Security into your workflow with GitHub Advanced Security and AI
summary
Shows GitHub Advanced Security actually finding and fixing bugs: CodeQL code scanning, secret scanning with push protection that blocks pushes and claims ~95% true positives, and Dependabot using the public GitHub Advisory Database to open real PRs (example: xjs 13→14 update with compatibility scoring). Demos include CodeQL queries run across repos in minutes, dependency review GitHub Action flagging vulnerable or restricted-license packages, and auto-fixes with Copilot that suggest and apply patches in PRs and IDEs.
AI-written summary · about
chapters (17)
- 0:00GitHub Advanced Security intro
- 1:51Core pillars
- 3:13Code scanning interop
- 3:55Secret scanning push protection
- 5:40Dependabot Advisory Database
- 6:44Live demo features
- 9:23Security in PRs and IDEs
- 12:31AI fixes with Copilot
- 13:54Dependency review compliance
- 16:02OSSF Scorecard risks
- 18:14Push protection secrets
- 20:39Enterprise security overview
- 22:45AI security in IDE
- 25:11Open source contributions
- 26:14Private vulnerability reporting
- 27:40Multi-repo CodeQL analysis
- 34:17Q&A
related talks
01h 02mDeveloping secure software with GitHub
52mSecurity as Code: A DevSecOps Approach
49mProtect Your Code with GitHub Security Features
38mCode Security Reinvented: Navigating the era of AI
27mBuilding a Secure Open Source Project on GitHub
58mSecuring Code in the Age of AI
58mProtect your code with GitHub security features
48mAdvanced Security with GitHub without GitHub Advanced Security