AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
Snipd AI
Jacob DePriest, VP at GitHub, discusses Artifact Attestations, profile hardening, GitHub Advanced Security, code scanning, and improving Dependabot to secure GitHub. Topics include preventing XZ-like attacks and the importance of open-source security measures.
Read more
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- GitHub emphasizes 2FA and Artifact Attestations for enhanced security measures.
- GitHub's AI tools like Copilot aid in proactive vulnerability detection and code corrections.
Deep dives
GitHub and Securing Open Source Dependencies
Securing GitHub and open source dependencies discussed by GitHub's VP and Deputy Chief Security Officer, Jacob De Priest. Steps taken to ensure security at GitHub include mandatory 2FA and attestations. Socket, a developer-first security platform protecting against vulnerable and malicious dependencies, highlighted. Dangers highlighted, such as type squat attacks and vulnerable dependencies.
Get the Snipd
podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any
moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share
& Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode