Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Code delivery in a DevSecOps way through automation and security - GitProtect & Mergify

Fewer engineers, more and more updates and milestones, competition velocity... - all of this makes DevSecOps seem complicated and costly. While security might be considered a bottleneck to faster releases, growing cyber threats and developers' mistakes makes it much too risky to minimize or ignore. In this webinar recording experts from GitProtect and Mergify join forces to prove to you that code delivery in a DevSecOps way doesn't have to be complicated 🚀

Cloud Threats Memo: Threat Actors Continue to Exploit the Flexibility of GitHub for Malicious Purposes

Dark Pink (also known as Saaiwc Group) is an advanced threat actor that has been operating since mid-2021, mainly in the Asia-Pacific region and to a lesser extent in Europe, leveraging a range of sophisticated custom tools within a sophisticated kill chain relying on spear-phishing emails. The group has been quite active since 2021, attacking at least 13 organizations in Vietnam, Bosnia and Herzegovina, Cambodia, Indonesia, Malaysia, Philippines, Belgium, Thailand, and Brunei.

Keep Your Private Code Packages Private With GitGuardian Honeytoken

GitGuardian Honeytoken provides a quick and easy way to add leakage and intrusion detection to your projects. When building your packages, just create a new Honeytoken from the GitGuardian dashboard and insert it into the project where you prefer. Then build and share that package with the team with confidence.

Customize Your GitGuardian Remediation Workflow

Have you ever wished you could customize the remediation workflow in your GitGuardian workspace? Now, you can! As a workspace Manager, you can manage the remediation workflow in the Secrets detection section of your settings and add up to 20 steps. You can also switch between the default GitGuardian remediation workflow and your custom remediation workflow.