Develop open source securely with GitHub. #DemoDays

So now you're hyped up on open source and find all sorts of components to use in your own project. But how to do so while still staying on top of the latest security vulnerabilities in open source? By integrating some of the features in this Demo Day, you can programmatically understand risks in your software supply chain.

2:03 - Start & Intros
5:51 - Security Frameworks
7:58 - Identify - detecting the open source that we're using in our project with the Dependency graph
12:57 - Org level security issues (GitHub Advanced Security)
15:30 - Repository security policy
18:14 - Protect - reviewing dependency changes and why you might want to pro-actively update dependencies
22:35 - Dependency review, Rich diffs, and security advisories
28:30 - Pro-active updates
32:48 - Detect - dealing with novel vulnerabilities
34:53 - Dependabot alerts and Security updates
41:59 - Respond - Privately collaborating on fixes to vulnerabilities and disclosing vulnerabilities.

[thewild]

6 views on an official github video wow