GitHub launches Security Lab to protect open source code

guest · Nov 14, 2019

GitHub launches Security Lab to protect open source code
November 14, 2019
https://venturebeat.com/2019/11/14/github-launches-security-lab-to-protect-open-source-code/

GitHub today launched the GitHub Security Lab, an ongoing effort to protect open source code projects. The GitHub Security Lab is aimed at bringing together security researchers from partner organizations like Google, Microsoft, Mozilla, Oracle, Uber, and HackerOne.

To power the GitHub Security Lab, GitHub is open-sourcing CodeQL, variant analysis software from Semmle, a company it acquired in September to help GitHub better spot exploits in code.
Click to expand...

To work with maintainers in a private space and give security research a way to apply for a Common Vulnerabilities and Exposures (CVE), GitHub also launched Security Advisories. Once completed, advisories are sent to the affected project and logged in the GitHub Advisory Database and SecurityAdvisory API.
GitHub also shared today that it will now scan tokens from new partners like Tencent.

The news comes on the second day of the GitHub Universe developer conference being held at the Palace of Fine Arts in San Francisco.
Click to expand...

GitHub: Announcing GitHub Security Lab: securing the world’s code, together

guest · Dec 19, 2020

Happy anniversary GitHub Security Lab!
December 18, 2020
https://github.blog/2020-12-18-happy-anniversary-github-security-lab/

Last year at GitHub Universe, we introduced the GitHub Security Lab, which is committed to contributing resources, tooling, bounties, and security research to secure the open source ecosystem.
The mission of the GitHub Security Lab is focused on open source software, and is articulated around three main axes: security research, community building, and industry engagement.

Just like for the rest of the world, 2020 has been a whirlwind year filled with new challenges and opportunities for the Security Lab. Here’s a look at some highlights from our first year. [...]
Click to expand...

What’s next for the GitHub Security Lab?
With 194 CVEs found so far, the race is on to see how many new ones we can find in the 2021 bug hunting season. As we reflect on the lessons learned from our inaugural year, we also look forward with a renewed focus on making our research content actionable for both the developer and security research community.

In the Security Lab, we especially appreciated how security researchers can now get credit for their findings. In 2021, the Security Lab is getting more directly involved in making this OSS vulnerability workflow one the entire community can participate in and trust.
Click to expand...

Log in or Sign up

GitHub launches Security Lab to protect open source code

guest Guest

guest Guest

Log in or Sign up

GitHub launches Security Lab to protect open source code

guest Guest

guest Guest

Useful Searches