Elevating Innovation: GitHub & JFrog Paving the Way Forward
summary
GitHub and JFrog demonstrate concrete integrations: push protection already blocks 30,000 secrets prevented this year, OIDC replaces hardcoded tokens with OIDC short‑lived tokens for CI, and JFrog X‑Ray and binary scans surface vulnerabilities and curation policy violations directly inside GitHub workflows. A VS Code demo shows a Copilot extension querying the organization catalog to recommend packages, flag blocked versions and suggest fixes — a live pipeline linkage that goes from build info to the exact job run.
AI-written summary · about
chapters (9)
- 0:00Introduction and partnership overview
- 2:40Developer workflow challenges
- 5:28Demo of push protection
- 10:04Integrity and visibility in pipelines
- 15:45OIDC integration demo
- 17:29Clarity and job summary features
- 21:47Consolidated security scanning
- 26:03GitHub Copilot extension demo
- 35:04Conclusion and future outlook
related talks
18mGlobal security at maximum velocity: Multi-Region and hybrid DevSecOps
23mFrog-Proof Security: Streamlining The Sec In DevSecOps
49mProtect Your Code with GitHub Security Features
32mFrom Code to Trusted Release
01h 02mDeveloping secure software with GitHub
01h 13mAddressing the Software Explosion
58mSecuring Code in the Age of AI
41mBake Security into your workflow with GitHub Advanced Security and AI