Develop open source securely with GitHub.
So now you're hyped up on open source and find all sorts of components to use in your own project. But how to do so while still staying on top of the latest security vulnerabilities in open source? By integrating some of the features in this Demo Day, you can programmatically understand risks in your software supply chain.
2:03 - Start & Intros
5:51 - Security Frameworks
7:58 - Identify - detecting the open source that we're using in our project with the Dependency graph
12:57 - Org level security issues (GitHub Advanced Security)
15:30 - Repository security policy
18:14 - Protect - reviewing dependency changes and why you might want to pro-actively update dependencies
22:35 - Dependency review, Rich diffs, and security advisories
28:30 - Pro-active updates
32:48 - Detect - dealing with novel vulnerabilities
34:53 - Dependabot alerts and Security updates
41:59 - Respond - Privately collaborating on fixes to vulnerabilities and disclosing vulnerabilities.
Hands-on training: https://lab.github.com/githubtraining...
Sur cette page du site, vous pouvez voir la vidéo en ligne Develop open source securely with GitHub. durée heure minute seconde en bonne qualité , qui a été Téléchargé par l'utilisateur GitHub 23 avril 2021, Partagez le lien avec vos amis et connaissances, sur youtube cette vidéo a déjà été regardée 820 fois et il a aimé 28 téléspectateurs. Bon visionnage!
