Hands-on application security with GitHub #DemoDays

GitHub and application security: Learn how to enable GitHub Advanced Security Features and how you might scale your implementation including how to understand the overall health of your org, Dependabot and using GitHub Actions, and know the community sourced vulnerabilities in open source software.

Take a walk with Kevin Alwell through the GitHub Learning Lab to build your first CI workflow in GitHub Actions: https://lab.github.com/githubtraining/github-actions:-continuous-integration

3:10 - Intro
6:27 - Overview
7:32 - Community sourced vulnerabilities in open source software
8:53 - GitHub Advisory Database and Dependabot alerts
13:32 - How do I understand the overall health of my organization from an Application Security perspective?
15:12 - Repository specific Application Security
15:59 - Drilling down to the pull request view
24:34 - Workflow files for GitHub Actions
33:40 - lab.github.com and hands on build of a CI pipeline

GitHub Actions Marketplace for workflows that have already been built by the community: https://github.com/marketplace?type=actions Automate almost anything!

For an even broader perspective on Secure Development and how you can bring DevOps and DevSecOps to your organization register for the Global Infocus Event: https://infocus.github.com