Engineering@Microsoft
Microsoft
Wed Sep 25 2024
Common annotated security keys
In April 2021, GitHub announced changes to their security token format that significantly enhanced security.
News-and-insights
GitHub
Wed Aug 14 2024
Found means fixed: Secure code more than three times faster with Copilot Autofix
With Copilot Autofix, developers and security teams can keep new vulnerabilities out of code and confidently remediate their backlog securit...
Security
Thu May 09 2024
How AI enhances static application security testing (SAST)
Here’s how SAST tools combine generative AI with code scanning to help you deliver features faster and keep vulnerabilities out of code.
Product
Wed Mar 20 2024
Found means fixed: Introducing code scanning autofix, powered by GitHub Copilot and CodeQL
Now in public beta for GitHub Advanced Security customers, code scanning autofix helps developers remediate more than two-thirds of supporte...
Engineering
Wed Feb 14 2024
Fixing security vulnerabilities with AI
A peek under the hood of GitHub Advanced Security code scanning autofix.
Tue Feb 06 2024
AppSec is harder than you think. Here’s how AI can help.
In practice, shifting left has been more about shifting the burden rather than the ability.
Mon Jan 08 2024
Frenemies to friends: Developers and security tools
When socializing a new security tool, it IS possible to build a bottom-up security culture where engineering has a seat at the table.
Fri Jan 05 2024
5 ways to make your DevSecOps strategy developer-friendly
Developers care about security, but poorly integrated tools and other factors can cause frustration.
Wed Nov 08 2023
Introducing AI-powered application security testing with GitHub Advanced Security
Learn about how GitHub Advanced Security’s new AI-powered features can help you secure your code more efficiently than ever.
Wed Sep 20 2023
Announcing general availability of GitHub Advanced Security for Azure DevOps
GitHub Advanced Security for Azure DevOps is now generally available.
Thu Sep 14 2023
Introducing auto-triage rules for Dependabot
Make quick work of alerts with preset and custom rules.
Tue May 23 2023
Announcing the public preview of GitHub Advanced Security for Azure DevOps
GitHub Advanced Security for Azure DevOps is now available for public preview, making GitHub’s same application security testing tools nativ...