Introduction to GitHub Advanced Security

In this session Ray Kao will share an overview of GitHub Advanced Security key features including code scanning, secret scanning, and supply chain security.
#microsoftreactor #github #advancedsecurity #secretscanning #codescanning #security #supplychainsecurity
Learn more about the series: aka.ms/Reactor...
[eventID:22195]

[@franciscoramos7391]

Just ran into this video. Exactly what I was looking for as I'm trying to get family with GHAS. Great presentation

[@VM-zb2xu]

Why we need to run multiple times for each issue? Can’t codeql get all the issues in one shot ?

[@raykao416]

I'm not sure what you mean by each issue? Perhaps each security Alert? If the Alerts are related to each other then yes, CodeQL/Code Scanning will pick that up and note that the solution solved the same alert/issue/problem and track in that alert's audit history that it was closed with a certain commit hash. Otherwise unrelated issues/alerts are separate concerns and have their own resolution path/requirements. Hopefully I understood your concerns and that this answer was applicable :) Cheers!