Good DevOps needs to really be good DevSecOps. But how do you get started? To be clear, there's no silver bullet. Doing things right requires a change in your company's culture. A culture that embraces security and changes how solutions are delivered by "shifting left". Changing to embrace agile practices and empower everyone to do the right thing.

GitHub cares about your code. They care about your apps. And they know building awesome apps means your apps are secure. But how to you get started? In this workshop, you'll get direct experience with the current state of art to build a simple "cloud native solution" using Azure PaaS where can apply DevSecOps principals and best practices using GitHub Enterprise Cloud and GitHub Codespaces.

While this two-day workshop is focused primarily on .NET Applications, Brian will cover general practices for all apps supporting components. You'll learn from the beginning about GitHub security and the core workflow of getting code from a developer to a deployed environment in Microsoft Azure. You'll start by learning about the different flavors and versions related to GitHub's offerings both free and paid, with a focus on the cloud. You'll learn critical aspects in getting an enterprise configured and running using GitHub including organizations, adding users, choosing directory authentication, teams, and more.

You’ll then learn about defining your repo strategy, including public, private, and internal visibility. And of course, he’ll cover repo settings around security, branch protection, and more. He’ll dig into pull requests, best practices, and how to manage the notification madness for a busy GitHub user. He’ll also dig into GitHub's various features around helping you produce better, more secure code early by looking at Dependabot, GitHub Secret scanning, and Code QL and more. And you will get to follow along and try all the good stuff.

Beyond the code, he’ll cover new GitHub Projects feature to help you track work. Later, he’ll dig into GitHub Actions for CI/CD and GitHub workflow automation. Over the two days, you'll get deep information and get to try things out using the command-line, your web browser, GitHub Codespaces, and Azure. By the end of the workshop, you will be ready to encourage your organization to do more and have a DevSecOps practice, built on GitHub.

You will learn:

• How to manage your code and assets with GitHub
• How to build a cloud native app using GitHub Codespaces
• How to build and release with GitHub