From App Security to Dev Security – Shift left with GitHub Advanced Security - Michael Kaufmann

Research shows, that most developers are still seeing security as a burden that slows them down. Too many security alerts in too many platforms overwhelm developers –not enough or no alerts are an indication of e a security risk. This leads to either slower software delivery or a higher security risk for your application. This talk will demonstrate how you can use GitHub as the central developer experience platform for all your security tools – giving developers a consistent experience and allowing them to address security issues as early as possible. The talk will cover strategies to drive adoption across your teams and introduce you to the default DevSecOps tooling from GitHub: Secret Scanning, Code Scanning, Dependabot, and Security Overview.