Kevin Lewis

Aug 20, 2025 • World Congress 2025

Real-World Security for Busy Developers

Stop shipping vulnerabilities and leaking secrets. Learn how to automate security inside your workflow, without sacrificing speed.

#1about 9 minutes

Why developers must take ownership of application security

The growing responsibility for security falls on developers due to the high cost of breaches and the scarcity of dedicated security specialists.

#2about 3 minutes

Prevent leaked secrets with push protection and scanning

GitHub's push protection blocks credentials from being committed, while secret scanning finds existing keys across your entire repository history.

#3about 9 minutes

Write and review secure code using AI-powered tools

Use GitHub Copilot for security education and code reviews, while CodeQL automatically finds vulnerabilities that Copilot Autofix can then resolve.

#4about 5 minutes

Manage vulnerable dependencies in your software supply chain

Use dependency review to check for vulnerabilities and license compliance in pull requests, and let Dependabot proactively create fixes for you.

#5about 1 minute

Drive security fixes with organization-wide campaigns

Security campaigns allow teams to prioritize and track the remediation of specific vulnerabilities across all repositories in an organization.

#6about 3 minutes

How security tools integrate into the developer workflow

A summary of how tools like push protection, code scanning, and Dependabot fit seamlessly into each stage of development from the IDE to production.

Cards Co

Remote

Intermediate

JavaScript

TypeScript

Andrew Comp
Cosio Valtellino, Italy

Intermediate

TypeScript

Name of

Remote

Intermediate

PHP

Java

Why developers must take ownership of application security

Prevent leaked secrets with push protection and scanning

Write and review secure code using AI-powered tools

Manage vulnerable dependencies in your software supply chain

Drive security fixes with organization-wide campaigns

How security tools integrate into the developer workflow

Typescript developer

Typescript developer

Remote

Matching moments

Avoiding common security mistakes and giving better feedback

The weekly developer show: Boosting Python with CUDA, CSS Updates & Navigating New Tech Stacks

Integrating security earlier in the development lifecycle

Vulnerable VS Code extensions are now at your front door

Common security failures beyond individual coding errors

Maturity assessment for technicians or how I learned to love OWASP SAMM

Key takeaways on IDE and developer tool security

You click, you lose: a practical look at VSCode's security

Integrating security throughout the CI/CD process

Plan CI/CD on the Enterprise level!

Hardening the CI/CD pipeline with automated security tools

You can’t hack what you can’t see

Key strategies for building a secure code culture

Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together

Why shift left security is crucial for modern development

Real-world Threat Modeling

Featured Partners

Related Videos

How GitHub secures open source

Simple Steps to Kill DevSec without Giving Up on Security

Why Security-First Development Helps You Ship Better Software Faster

Supply Chain Security and the Real World: Lessons From Incidents

Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together

Programming secure C#/.NET Applications: Dos & Don'ts

You click, you lose: a practical look at VSCode's security

Securing Your Web Application Pipeline From Intruders

Related Articles

From learning to earning

Product Security Engineer

Application Security Expert

Consultant DevSecOps/Application Security

Consultant DevSecOps/Application Security

Embedded Security Engineer

Security Engineer, PCI & ASV

Mobile App Developer Security

Technical Enablement Architect, Application Security

Web-Entwickler JAVA / JavaScript mit Fokus Security | Security by Design, Softwarearchitektur (mwd)