Conversation

"Drowning in AI-generated vulnerability reports? Here's how to stay afloat.” Grab a paddle and join the two Kevins @kevinbackhouse and Kevin Stubbings as they navigate the creek. You'll practice handling security reports and learn best practices and techniques for triaging low value or invalid reports.

“Disrupting supply chain attacks: A threat framework for GitHub Actions” — Steve Glass and @gregose share an in-depth look at supply chain attacks across the Actions ecosystem and what we shipped to disrupt them. If you maintain open source or CI/CD pipelines, this is one to add to your agenda.