“Disrupting supply chain attacks: A threat framework for GitHub Actions” — Steve Glass and @gregose share an in-depth look at supply chain attacks across the Actions ecosystem and what we shipped to disrupt them. If you maintain open source or CI/CD pipelines, this is one to add to your agenda.
Search
5 results for “githubsecuritylab”
-
"Drowning in AI-generated vulnerability reports? Here's how to stay afloat.” Grab a paddle and join the two Kevins @kevinbackhouse and Kevin Stubbings as they navigate the creek. You'll practice handling security reports and learn best practices and techniques for triaging low value or invalid reports.
-
“Your CI has full internet access. GitHub Actions firewall changes that.” Join @steiza for a demo of outbound request visibility and allowlists—and practical ways to limit what your workflows can reach.
-
“How GitHub secures open source” — join @anticomputer and @xcorail for seven years of lessons from GitHub Security Lab: make security simple to adopt, build it with community, and understand what AI means for open source. Take ideas straight back to your project.
-
The hackers are taking the stage at GitHub Universe 2026 🛡️
Maintainers: these sessions bring practical lessons for securing the open source projects you build and depend on.
Come learn, connect, and take ideas home to your community.