Technical mastery for the experienced developer
Push the boundaries of your technical expertise with these advanced sessions. Dive deep into extending GitHub Copilot’s capabilities, from building custom extensions to integrating AI into your coding workflow. Learn how to enhance code security by leveraging CodeQL, exploring practical applications for identifying and fixing vulnerabilities. This agenda is perfect for developers eager to sharpen their skills and stay ahead in the world of software development.
Keeping score: Deploying OpenSSF Scorecard and GitHub Advanced Security at enterprise scale - SEC1758B
Nobody likes getting a bad report card, and as adults in the workplace, not much has changed since our early school days! So, how do we square human nature—and our enthusiasm to adopt the latest technology—with the need to secure open source software and ensure developers thoroughly understand requirements? Join Lelia Bray-Musso, open source architect from Cisco's Open Source Program Office (OSPO), on her journey through introducing Open SFF Scorecard and GitHub Advanced Security solutions to hundreds of GitHub Enterprise Cloud repositories. She'll discuss tactics for deploying tools that maintainers might not realize they need, and the importance of clear communication when enforcing new policy. By the end of this talk, you'll be proud to hang your security report card on the fridge!
An inside look at how GitHub uses LLMs, fine-tuning, and prompt engineering in GitHub Copilot - AI1332P
GitHub Copilot was the first at-scale AI assistant for code completion in software development. Join our moderator, Matthew Masarik, director of applied science, and panelists, Cooper Nederhood, machine learning engineer, Joe Bourne, staff product manager, and Mitch Naylor, senior applied machine learning researcher, all from GitHub, to learn how our Applied Science team is enhancing the quality of Copilot's code completion. Together, they'll discuss how GitHub uses LLM fine-tuning, RAG, prompt engineering, and other techniques to increase accuracy and supercharge productivity.
Create type-safe SDKs for REST APIs in 10 minutes or less - DEV2027D
It’s no coincidence that the most successful API companies all support a wide range of SDKs for their users. SDKs give developers the ability to integrate with APIs in a dev-friendly manner, using their favorite languages and frameworks. That leads to faster integration and wider adoption of the API. It’s a win-win. Join Sagar Batchu, CEO and co-founder at Speakeasy, to explore how your organization can turbocharge its API adoption and how you can give your APIs the SDK-first treatment with automated GitHub workflows.
Complex migrations: Why failing forward helps push past resistance to change - DEV1349B
Change is hard, even when you know the change is worth it. When Wayfair moved to GitHub Enterprise Cloud in 2023, the task of moving 15,000+ repositories and 3,000 active users was daunting. There were numerous security, network, and operational challenges to surmount, but with careful preparation our migration ran smoothly. We're releasing the migration toolkit Wayfair developed as open source to make it easier for others to do the same. Join us to learn how we pushed our teams to embrace discomfort and adopt a fail-forward approach, even on our most sensitive code base.
Securely building GitHub on GitHub - SEC1939M
As the world’s leading Copilot-powered developer platform, GitHub embeds security directly into the developer workflow so that the platform trusted by millions of developers provides enhanced security at every step. This extends to how we adopt security controls to protect the GitHub platform and the novel ways we are building AI-native security experiences to achieve greater security outcomes. In this session, we’ll show you how we’re building GitHub more securely to support the world’s developers.
Building agentic systems with VS Code extensibility and GitHub Copilot at Uber - AI1719B
Join Uber's Matas Rastenis, senior software engineer, and Sourabh Shirhatti, product manager, to discover how the company elevated GitHub Copilot into a dynamic partner in development using VS Code extensibility. This session will cover how Matas and Sourabh developed agentic systems that merge automation with human input, enhancing developer productivity, and reducing toil. You'll learn about the tools and strategies they've adopted to integrate AI more deeply into Uber's coding processes. This presentation will offer practical insights into extending AI capabilities in a large-scale tech setting.
How GitHub Next took Copilot Workspace from concept to code - AI1164B
Whether you’re addressing an issue, iterating on a pull request, or bootstrapping a project, GitHub Copilot Workspace helps jumpstart your tasks by describing what you want in natural language. You remain in control as you move between tasks, specs, plans, and code. Join GitHub's Chris Reddington, senior program manager of DevRel, and Cole Bemis, research engineer on GitHub Next, for an introduction to Copilot Workspace, a Copilot-native dev environment launched in April 2024 by GitHub Next. Learn how Copilot Workspace works, how we got here, and what we've learned so far from the technical preview.
Automated governance: An evidence-based approach to asset inventory - SEC1896D
Software asset inventory is an often overlooked, but critical component of automating policy enforcement in the DevOps pipeline. Poor inventory paired with broad policies can subject developers to having unnecessary or inaccurate requirements added to their workflows. In this session, Michael Edenzon, CEO and co-founder of Fianu, will outline the common gaps in existing software inventories and provide simple, actionable steps that DevOps engineers can take to establish an evidence-based software asset inventory. You'll learn how the powerful combo of Fianu and GitHub can unblock even the most entrenched manual processes.
Continuous deployments, the GitHub way - DEV1682S
The continuous deployment concept has been around for a long time, and it's not uncommon to integrate with GitHub to accomplish CI/CD implementation goals. However, there's a way to do it simply and with security in mind, and GitHub's Senior Service Delivery Engineer, Igwe Kalu, and compeple AG's DevOps/Platform Engineer, Turgay Akbas, will show you how. In this breakout session, Igwe and Turgay will define relatable bounding contexts in the CI/CD domain and show how to accurately associate respective contexts to fitting GitHub events, implement artifact attestation, and secure deployment to a CSP with OIDC. You'll learn how to integrate security and safeguard your implementation outcomes. Note: This stage has limited capacity and will seat attendees at a first come first serve basis. Adding this session to your schedule does not reserve a seat. Please attend early.
Securing your code with GitHub Advanced Security - SEC1953W
Here at GitHub, we like to say that "found means fixed." That's because when issues are found they can more easily be fixed. In this workshop with GitHub's Josh Johanning, senior DevOps architect, and Mickey Gousset, staff DevOps architect - FastTrack, you'll dive into a repository filled with security alerts and begin to remediate them using GitHub Advanced Security (GHAS) and Dependabot, effectively maintaining code integrity. You'll also encounter and resolve a few security issues using GitHub Codespaces and GitHub Copilot. The end goal? To learn and develop strategies to motivate your developers to turn reactive fixes into proactive security habits.
Copilot Autofix: Shaping the future of secure coding practices - SEC1367S
Discover how AI is transforming code security in this dynamic session on Copilot Autofix in GitHub Advanced Security (GHAS), facilitated by Arthur Neves, staff software engineer, and Pierre Tempel, staff product manager, at GitHub. Learn to detect and fix vulnerabilities in real time through pull requests, ensuring better code integrity before production. Additionally, explore how GitHub's newest tools can enhance your security posture and compliance, and join us to help lead the charge in advancing security with AI. Note: This stage has limited capacity and will seat attendees at a first come first serve basis. Adding this session to your schedule does not reserve a seat. Please attend early.
How to build (and publish) custom GitHub Copilot extensions - AI1944W
GitHub recently introduced GitHub Copilot Extensions, enabling teams to access contextual information and perform actions with GitHub Copilot Chat across various tools used in the software development lifecycle. These extensions can now be made available to everyone through the GitHub Marketplace, and your enterprise can drive adoption by integrating your own products with GitHub Copilot. In this workshop with GitHub’s senior service delivery engineers Damien Hardy and Guilherme Teixeira, you'll learn the basics of building a custom extension and publishing it to the Marketplace.
How to unlock the secrets of your legacy code with GitHub Copilot - AI1437D
Transform your legacy code with the advanced capabilities of GitHub Copilot. In this session, Sophine Clachar, senior data scientist at Microsoft, and Yadhav Jayaraman, staff service delivery engineer at GitHub, will guide you through leveraging GitHub Copilot Chat for in-depth codebase analysis. Plus, learn how to use Copilot Chat to get a high-level view of the logic and functionality used by Copilot, and how to use personas to tailor its output to various roles, from developers to business analysts.
Real talk on navigating code security in the age of AI - SEC1889L
While AI pair programmers like GitHub Copilot make the process of building software both easier and faster, a question remains: what about security? Join GitHub's Joseph Katsioloudes, senior developer advocate, and Kasia Sitkiewicz, staff product manager, in the Discussions Lounge to explore the opportunities this new era of AI provides us and how we can minimize the gap in software security. This is vital given that there's only one application security specialist for every hundred software developers. Before AI, our goal was to shift security left, but now we can start from the left, drastically improving security.
Safe and secure: Using CodeQL to validate safety-related applications - SEC1709S
The development of safety-related applications necessitates taking a rigorous approach to software security and quality during development. However, traditional tooling in this space can be difficult to deploy and integrate. In this sandbox session with Luke Cartey, director of Security Services at GitHub, you'll see how code scanning and CodeQL can be used to help seamlessly verify that applications are safe and secure throughout the development process. Luke will work through an open source example from the automotive industry, enabling CodeQL Coding Standards, GitHub's C/C++ safety-focused rule set, and show how it can satisfy the requirements of ISO26262. Note: This stage has limited capacity and will seat attendees at a first come first serve basis. Adding this session to your schedule does not reserve a seat. Please attend early.
The perfect pairing: Your data + GitHub Copilot for advanced data solutions - AI1959W
In this workshop with Microsoft's Pamela Fox, cloud advocate in Python and Alfredo Deza, developer advocate, you'll learn how to leverage GitHub Copilot to enhance data engineering projects. Come ready to learn how to apply advanced features of Copilot to identify data-related solutions and create automations that increase high data quality.