Post

@securitylab.github.com

The hackers are taking the stage at GitHub Universe 2026 🛡️ Maintainers: these sessions bring practical lessons for securing the open source projects you build and depend on. Come learn, connect, and take ideas home to your community. githubuniverse.com

githubuniverse.comGitHub UniverseGitHub's global developer event is back. Join the world's fair of software.

GitHub Security Lab

@securitylab.github.com

“How GitHub secures open source” — join @anti.computer and @xcorail.bsky.social for seven years of lessons from GitHub Security Lab: make security simple to adopt, build it with community, and understand what AI means for open source. Take ideas straight back to your project.

GitHub Security Lab

@securitylab.github.com

“Your CI has full internet access. GitHub Actions firewall changes that.” Join Zach Steindler for a demo of outbound request visibility and allowlists—and practical ways to limit what your workflows can reach.

GitHub Security Lab

@securitylab.github.com

"Drowning in AI-generated vulnerability reports? Here's how to stay afloat.” Grab a paddle and join the two Kevins @kevinbackhouse.bsky.social as they navigate the creek. You'll practice handling security reports and learn best practices and techniques for triaging low value or invalid reports.

22/10/26, 7:06 pm0 reposts0 likes

GitHub Security Lab

@securitylab.github.com

“Disrupting supply chain attacks: A threat framework for GitHub Actions” — Steve Glass and Greg Ose share an in-depth look at supply chain attacks across the Actions ecosystem and what we shipped to disrupt them. If you maintain open source or CI/CD pipelines, this is one to add to your agenda.