GitHub Advanced Security and GitHub Copilot: Working together to make security
summary
GitHub Advanced Security combines CodeQL, Dependabot and secret scanning with GitHub Copilot to detect and fix vulnerabilities right in pull requests: Copilot suggests a concrete patch for a flagged SQL injection so developers can accept or tweak it, and GHAS reports a 7X improvement in remediation rates versus industry norms. Secret scanning now uses Copilot to find loose passwords with far fewer false positives—secrets appear in 99.999% of orgs when scanning is enabled—and the features are in a beta pilot.
AI-written summary · about
chapters (5)
- 0:00GitHub Advanced Security intro
- 1:34Security issues in PRs
- 4:45Secrets detection with AI
- 7:54AI cuts secret false positives
- 9:17Future of GitHub Advanced Security
related talks
01h 02mDeveloping secure software with GitHub
58mSecuring Code in the Age of AI
46mShip-It safely with GitHub Advanced Security
38mCode Security Reinvented: Navigating the era of AI
01h 00mLearn Live: GitHub administration for GitHub Advanced Security
49mProtect Your Code with GitHub Security Features
52mSecurity as Code: A DevSecOps Approach
32mCode Security Reinvented: Navigating the Era of AI