> Markdown version of [/events/world-congress-2025/sessions/670-how-github-secures](https://www.wearedevelopers.com/events/world-congress-2025/sessions/670-how-github-secures). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# How GitHub secures open source


- **Date:** Thursday, Jul 10, 2025
- **Time:** 16:10–16:40 (30 min)
- **Room:** Stage 11
- **Event:** World Congress 2025
- **Tags:** ai, cybersecurity, git, open source

## Recording

[Watch recording](https://www.wearedevelopers.com/videos/1450-how-github-secures-open-source)

## Description

Uncover valuable insights into how GitHub secures the open-source software we all depend on, with real-world examples from the GitHub Security Lab, which uncovered 1,000+ vulnerabilities and was credited with 700+ CVEs over four years. Securing open-source software is critical because it underpins much of today’s digital infrastructure, and vulnerabilities in widely used components can create significant risks across entire software ecosystems.

This session will provide the latest updates on how GitHub enhances various elements of the Secure Software Development Life Cycle (SSDLC), leveraging Artificial Intelligence (AI), Developer Experience (DevEx), and community collaboration to secure open source. We will explore best practices in software security, including code scanning, secrets hygiene, and automation. The audience will gain a deep understanding of industry-leading initiatives and lessons learned from our experience in today's rapidly changing landscape.

## Speaker

### [Joseph Katsioloudes](https://www.wearedevelopers.com/@joseph-katsioloudes)

GitHub Security Lab


## Related talks at this congress

- [Real-World Security for Busy Developers](https://www.wearedevelopers.com/events/world-congress-2025/sessions/860-real-world-security) — Kevin Lewis
- [Code Red: When Your Tools Turn Against You ](https://www.wearedevelopers.com/events/world-congress-2025/sessions/510-code-red-when-your) — Aaron Bray, Julian Totzek-Hallhuber
- [Supply Chain Security and the Real World: Lessons From Incidents](https://www.wearedevelopers.com/events/world-congress-2025/sessions/685-supply-chain) — Adrian Mouat
- [Beyond the Hype: Building Trustworthy and Reliable LLM Applications with Guardrails](https://www.wearedevelopers.com/events/world-congress-2025/sessions/552-beyond-the-hype) — Alex Soto