Behind the Firewall: Checking into the Code Security Community 🤖🪐

[ghostinhershell]

Hey hey, @ghostinhershell here reporting in for with a Code Security Community Check-In 🗞

We’ve got some community shout-outs to give, questions that need community expertise to answer, updates on what’s new in the Code Security space and updates on GitHub Universe 2024 🪐

🤖 Code Security Shoutouts

• @ThisIs-Developer (check out their project spotlight here) lent community members a hand with an answer to the post Could not get my account lmysticl.
• Shout out to @MuxN4 for teaching us how floating-point numbers are represented in binary
• A self-serve solution is always a win ✨shoutout to @Dev202409 for finding a solution to their post Account A signed in everywhere, commit is assigned to account B. How to prevent this?.

--
Have you been helped by a community superstar that you’d like to see celebrated? Tag them to nominate them below!

For community members who post questions, marking responses that solves your question as the answer goes a long way. When you mark a comment in the Discussion as an answer, GitHub will highlight the comment to help other community members quickly find the answer as well.

Remember to thank these and other community members that take the time to comment and help troubleshoot these problems. An acknowledgement of a job well done can have an incredible effect and make someone’s day. ☀️ We’re here to learn, discover and connect so try and mark a comment as an answer if suitable, give a thank you and select a reaction as a way to show your appreciation!

🧠 Help Wanted! Questions that Need Answers

Got your thinking cap on? These popular community posts could use your expertise!

• Unable to Push to GitHub Due to Secret Scanning
• Need help updating rollup to fix DOM Clobbering vulnerability :(
• How Do You Handle Data Privacy and Security in Hybrid AI Systems?

Looking to uplevel your own security knowledge so you can tackle some of these popular questions yourself? Check out our GitHub Advanced Security certification! We even have a prep course in the community to help you study ✨

🆕 What’s New in Code Security?

A number of feedback posts have been published in the community for recent releases in the GitHub Security World. Have you seen them? 👀

• Secret scanning: on-demand revocation for GitHub personal access tokens - feedback
• Secret scanning: public leak locations and alert de-duplication across an organization or enterprise - feedback
• Secret Scanning & Security Dashboard Updates 📢
• EPSS Scores in the GitHub Advisory Database 🚀
• CodeQL 2.19.0: TypeScript 5.6 and Go 1.23 support, new queries for JavaScript and Ruby
• Announcing TISAX for GitHub 🚀

Please check them out and, if you have any feedback to share, sound off in the comments section of the applicable post.

🪐✨ Universe 2024

GitHub Universe 2024 will be an unparalleled gathering of the brightest minds, companies, and innovators in the industry. Plus this year is the 10 year anniversary of the event 🎉 Will you be there? 👀

• LAST CALL to Get Tickets: Vist the Universe website to purchase your tickets and plan your agenda!

Excited for Universe 2024? Keep the conversation going year-round with GitHub's online community—your go-to space for insights, networking, and the latest in all things GitHub. Join in to connect with peers, access exclusive resources, and keep building together before, during, and after the event!

• Get Started with Universe 2024: With less than a week to go, join us in everything Universe in the community. Check out this Community Post to start the celebration!
• Open Source
  • Open source for all: Skilling the next generation of developers
• GHAS / Security / Code Security
  • Go big! Efficiently deploy and customize security tooling at enterprise scale
  • Enterprise code security 101: Getting started with GitHub Advanced Security (Universe 2024 Workshop 🪐 )
  • Why (and how) IKEA, WirelessCar, and SAP adopted GitHub Advanced Security
  • Tackling supply chain vulnerabilities with Dependabot [SEC1968D]
  • Real talk on navigating code security in the age of AI

✍️ Quote of the Month

"Any problem can be solved by investing more heavily into it, but there’s always a more efficient solution. If you’re convinced that you must surge investment, check if your mental model is leading you astray."

From Move Past Incident Response to Reliability by Will Larson // CTO, Calm

—--
A very big thank you to everyone in the community who actively contributes thoughts and answers to the questions that come into the New to GitHub category!