Lighting session at the Adelaide .NET User Group on an intro to GitHub Advanced Security
Lighting session at the Adelaide .NET User Group on an intro to GitHub Advanced Security
Rob Bos
Netherlands
Rob has a strong focus on ALM and DevOps, automating manual tasks and helping teams deliver value to the end-user faster, using DevOps techniques. This is applied on anything Rob comes across, whether it’s an application, infrastructure, serverless or training environments. Additionally, Rob focuses on the management of production environments, including dashboarding, usage statistics for product owners and stakeholders, but also as part of the feedback loop to the developers. A lot of focus goes to GitHub and GitHub Actions, improving the security of applications and DevOps pipelines. Rob is a Trainer (Azure + GitHub), a Microsoft MVP and a LinkedIn Learning Instructor and regularly shares his knowledge through blogs, videos, and speaking at international conferences.
Community Contributions
Multiple blogposts
9 blogposts on https://devopsjournal.io/ all about GitHub, GHAS, GHAzDo.
10 GitHub Actions in my own org
All sorts of automation helpers
GitHub Actions Marketplace news
News site on updates and new actions on the GitHub Actions Marketplace
Lots of video content on Copilot
GitHub Copilot - levels of enlightenment (9 videos, 1.5 hours of content)
GitHub Copilot Workspace walkthrough
GitHub Copilot Power user example
Copilot update news site
Sharing my content and Copilot news through this overview website: https://github-copilot.xebia.ms/
Five Common Errors During GitHub Copilot Enablement
Shared my lessons learned from teaching thousands of engineers how to use GitHub Copilot.
Decision makers track.
Protect yourself against supply chain attacks
As an industry, we are using third party packages and building components for lots of things. In this supply chain, there are lots of places for vulnerabilities. They can then be used to attack your DevOps pipelines! In this session, I will go over some common attack examples and show you a way to prevent them from happening. There are frameworks available in the industry that guide you through the process of becoming more mature in protecting not only your source code and application but also the packages you use and the pipelines you build them with. I'll demo some of GitHub's features that help preventing these types of attacks.
