Скачать или смотреть Securing the Vibe Coding Era with GitHub and Endor Labs

The era of vibe coding is here with developers leveraging powerful AI tools like GitHub Copilot to accelerate development velocity. But how can security teams keep up without slowing developers down?

This session showcases how GitHub Advanced Security and Endor Labs work together to help organizations embrace the vibe coding era securely.

We'll dive into how to:
● Start secure by default: See how GitHub Copilot and Endor Labs work together to identify and fix open source vulnerabilities before you commit code
● Keep developers in flow: Learn how to use function-level reachability analysis to eliminate security distractions and helps focus remediation efforts
● Remediate at scale: Strengthen Dependabot's capabilities with Endor Labs' upgrade impact analysis to confidently automate safe, pre-validated dependency upgrades.

📌 Learn more about the series! https://aka.ms/ReactorS-1311

Chapters:
00:06 - Welcome and Housekeeping with Anna
01:02 - Meet the Presenters: Lupita and Matt
03:18 - What is Vibe Coding?
04:43 - How AI is Changing the Way We Code
08:00 - Risks of AI-Generated Code
10:58 - Real-World Example: When Vibe Coding Goes Wrong
13:02 - The Role of Secure Prompts in AI Coding
16:43 - Experiment: AI Dependency Explosion
20:36 - Secure Prompting and Rule-Based Coding
25:05 - What is an MCP Server and Why It Matters
27:00 - Live Demo: Secure Coding with GitHub Copilot + Endor Labs
36:03 - GitHub Advanced Security Overview
37:46 - Secret Protection and Code Scanning
42:03 - Autofix and Security Campaigns
44:34 - Final Thoughts and Resources

#MicrosoftReactor #learnconnectbuild #GitHubAdvancedSecurity #ghas

[eventID:26275]