PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

DevSecOps: How GitHub Bridges the Gap Between Security and Development

hackerone.com | blog | #devsecops | #github | #security-culture | #application-security | #software-development
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

GitHub CSO Mike Hanley explains how the company embeds security into developer workflows, shifting security from blocker to enabler, with DevSecOps practices other organizations can adopt.
Published
Collected

Related coverage

blog · projectdiscovery.io
Continuous PR Security Review
Post-mortem vulnerabilities often look harmless in the diff—they only surface at runtime. ProjectDiscovery says LLM code review hits just 63% precision, so PRs need validation on a running app.
blog · jfrog.com
How to Connect the JFrog Platform to Your GitHub Environment to Create a Seamless Integration
The latest JFrog collaboration with GitHub enables you to easily combine your favorite solutions for source code and binaries in a seamless integration. This means you now have a unified comprehensive and secure end-to-end experience that supports your software projects. This integration covers everything from curating open source packages, coding, CI, release management, deployment and…
blog · jfrog.com
GitHub and JFrog Partner To Unify Code and Binaries for DevSecOps
Note: This post is co-authored by JFrog and GitHub and has also been published on the GitHub blog As the volume of code continues to grow exponentially, software developers, DevOps engineers, operations teams, security specialists, and everyone else who touches code are increasingly spending their time in the weeds of securing, delivering, and scaling software.…
blog · netspi.com
Getting Started on Your Application Security Journey
Four myths hold back application security programs, from 'AppSec teams are optional' to 'DevOps shops do not need one'; successful journeys start with a central governing team and defect discovery.
blog · hackerone.com
AI Code Review: Enhancing Human Expertise
Argues that AI coding tools like GitHub Copilot raise the stakes for thorough code review, and AI-assisted review should augment rather than replace human expertise.
blog · hackerone.com
Why You Should Use Pull Requests: A Developer's Essential Tool
An overview of why pull requests matter: peer review catches bugs and standard violations early, improves team communication and knowledge sharing, and keeps the main codebase stable.
Back