So now you're hyped up on open source and find all sorts of components to use in your own project. But how to do so while still staying on top of the latest security vulnerabilities in open source? By integrating some of the features in this Demo Day, you can programmatically understand risks in your software supply chain.
2:03 - Start & Intros
5:51 - Security Frameworks
7:58 - Identify - detecting the open source that we're using in our project with the Dependency graph
12:57 - Org level security issues (GitHub Advanced Security)
15:30 - Repository security policy
18:14 - Protect - reviewing dependency changes and why you might want to pro-actively update dependencies
22:35 - Dependency review, Rich diffs, and security advisories
28:30 - Pro-active updates
32:48 - Detect - dealing with novel vulnerabilities
34:53 - Dependabot alerts and Security updates
41:59 - Respond - Privately collaborating on fixes to vulnerabilities and disclosing vulnerabilities.
Hands-on training: https://lab.github.com/githubtraining...
En esta página del sitio puede ver el video en línea Develop open source securely with GitHub. de Duración hora minuto segunda en buena calidad , que subió el usuario GitHub 23 abril 2021, comparta el enlace con amigos y conocidos, en youtube este video ya ha sido visto 820 veces y le gustó 28 a los espectadores. Disfruta viendo!