Open Source in Finance Forum New York 2022

Deciding to open source a project leads to a number of security-related questions within firms, including: How can we assure the code we are releasing and accepting is as secure as possible? How do we respond if someone finds a vulnerability? GitHub provides several security tools and capabilities free of charge for all open source projects. This talk will cover how to use GitHub to: * Protect your project from vulnerable dependencies, * Scan your code for security vulnerabilities, * Establish a security policy for responsible disclosure of discovered vulnerabilities, * Privately collaborate with security researchers to fix identified vulnerabilities before disclosing them to your community