Develop open source securely with GitHub.
So now you're hyped up on open source and find all sorts of components to use in your own project. But how to do so while still staying on top of the latest security vulnerabilities in open source? By integrating some of the features in this Demo Day, you can programmatically understand risks in your software supply chain.
2:03 - Start & Intros
5:51 - Security Frameworks
7:58 - Identify - detecting the open source that we're using in our project with the Dependency graph
12:57 - Org level security issues (GitHub Advanced Security)
15:30 - Repository security policy
18:14 - Protect - reviewing dependency changes and why you might want to pro-actively update dependencies
22:35 - Dependency review, Rich diffs, and security advisories
28:30 - Pro-active updates
32:48 - Detect - dealing with novel vulnerabilities
34:53 - Dependabot alerts and Security updates
41:59 - Respond - Privately collaborating on fixes to vulnerabilities and disclosing vulnerabilities.
Hands-on training: https://lab.github.com/githubtraining...
On this page of the site you can watch the video online Develop open source securely with GitHub. with a duration of hours minute second in good quality, which was uploaded by the user GitHub 23 April 2021, share the link with friends and acquaintances, this video has already been watched 820 times on youtube and it was liked by 28 viewers. Enjoy your viewing!
