How can we leverage AI for more secure and efficient code and how will it impact devsecops? Ashish spoke to Michael Hanley, CSO and SVP of Engineering at GitHub, about the transformative impact of GitHub Copilot and AI on software development and security. Michael speaks about GitHub's internal use of Copilot for over three years and its role in enhancing developer satisfaction and productivity by removing mundane coding tasks. They speak about the broader implications for DevSecOps, the future of AI in coding, and strategic tips for integrating AI tools within organizations.
Guest Socials: Michael's Linkedin
Podcast Twitter - @CloudSecPod
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security Podcast- Youtube
- Cloud Security Newsletter
- Cloud Security BootCamp
Questions asked:
(00:00) Introduction
(02:19) A bit about Michael Hanley
(04:25) Making Security Easy for Developers
(07:17) What is GitHub Copilot?
(10:01) Whats the Future of AI for Security and Developers?
(13:36) Security Recommendations for using AI
(16:35) How is data stored in GitHub Copilot?
(17:40) How is AI impacting DevSecOps?
(21:50) The balance between Security and Innovation
(24:18) The evolution of education with AI
(27:30) Strategic Approach for CISOs implementing AI Pair Programmers
(30:08) Bridging the gap between Security and Engineering
(34:37) The Fun Questions
Resources spoken about during the episode:
https://resources.github.com/copilot-trust-center/
https://www.github.careers/careers-home
Network Pentest 2.0 : The Cloud Pentest Revolution
Google Cloud Hacking Red Team Perspective!
Cloud Security in the BoardRoom - CISO Perspective with Phil Venables
Google Cloud IAP - A Pentester Viewpoint
Doing Google Cloud Security RIGHT!
An AWS Centric View of Google Cloud Identity
So You WANT TO DO Google Cloud Threat Detection - Start here!
Using Data Perimeters in AWS To Scale Guardrails
AWS INCIDENT RESPONSE - Automate Containment
Cloud Security Baseline For Scale
AWS ReInforce 2023 Recap & Highlights
Will Application Security Eat Cloud Security for Lunch!
AI Security - Can LLM be Attacked?
What is DevSecOps? DevSecOps with Cloud & AI explained for 2023
Evolution of Kubernetes Security | KubeCon EU 2023
A DEV FRIENDLY CLOUD NATIVE SECURITY PIPELINE!
THEY SCANNED ENTIRE GITHUB FOR SECRETS AND FOUND THIS!
Kubernetes Cluster Security Audit Explained
Network Security for Kubernetes
CONTINUOUS KUBERNETES SECURITY IN 2023
Create your
podcast in
minutes
It is Free
Insight Story: Tech Trends Unpacked
Zero-Shot
Fast Forward by Tomorrow Unlocked: Tech past, tech future
The Unbelivable Truth - Series 1 - 26 including specials and pilot
Lex Fridman Podcast