"GitHub Actions has emerged as one of the top pieces of tech in the DevOps and CI/CD scene." - That's AppSecEngineer instructor Abhay Bhargav talking about GitHub Actions, a tool rapidly gaining popularity among product teams around the globe. In this video, you'll be looking at: - How to trigger #SAST workflows with #GitHubActions - How to use GitHub to consume different types of reports from #SASTtools - How to work with SARIF file format Check out the full video for an in-depth look at GitHub Actions and how it can play a central role in your #DevSecOps workflow. ----------- #AppSecEngineer is a powerful training platform that delivers amazing hands-on training on AppSec, AWS Security, Cloud Security, Kubernetes, Container Security and Advanced Application Security. AppSecEngineer is ideal for job seekers, knowledge seekers and companies that want to get their workforce equipped to handle real-world security issues with their newly minted and highly educated AppSec Engineers Chapters 0:00 Pre-Start Intro 01:06 Intro 01:31 Create Github project 02:01 Creating Github repository 05:32 Using Semgrep 07:03 Leveraging static analysis workflow with Github actions 07:43 Code scanning insights in Github repository 08:20 Using Sarif capabilities of Github Actions 12:49 Run the static analysis Learn more about DevSecOps at: https://appsecengineer.com/courses/github-actions-for-devsecops/ Twitter: https://twitter.com/AppSecEngineer Linkedin: https://www.linkedin.com/company/appsecengineer/ ... https://www.youtube.com/watch?v=by25ZKJ6ENU

Register here - https://www.blackhat.com/us-23/training/schedule/index.html#devsecops-masterclass--edition-30542 This training takes a comprehensive, focused and practical approach at implementing DevSecOps Practices with a focus on Application Security Automation. The training is a glued-to-your-keyboard hands-on journey with labs that are backed by practical examples of DevSecOps and AppSec Automation. KEY TAKEAWAYS * Updated, yet battle-tested Application Security Automation Techniques + Practical Security Pipelines, with both conventional and unconventional techniques. Picked from real-world implementations and indicative of modern application development and deployment environments. Students will be able to **use** this knowledge and tools as soon as they are done with the class. * Cookbook-style cloud security automation coverage of AWS and Azure gives participants an in-depth perspective of security automation on the cloud for multiple cloud stacks and environments. Cookbook-style narratives focus on stories, which are great for people to understand * Comprehensive Container Security coverage including Kubernetes Security, which is critical, as organizations typically need to use Container Orchestration and security is a key aspect of orchestrating containers. WHO SHOULD TAKE THIS COURSE * Application Security Engineers * DevOps Professionals * Security Engineers * Security Managers who are trying to understand how they should implement Security for DevOps * Developers * Security Architect Register here - https://www.blackhat.com/us-23/training/schedule/index.html#devsecops-masterclass--edition-30542 #appsec #appsecengineer #blackhat #blackhatusa #blackhatusa2023 #devsecops #devops #security #applicationsecurity ... https://www.youtube.com/watch?v=D1OY3RhW_ak