> Markdown version of [/events/world-congress-2026-north-america/sessions/1881-secure-development](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1881-secure-development). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Secure development from pull request to production with GitHub


- **Date:** Friday, Sep 25, 2026
- **Time:** 15:00–17:00 (120 min)
- **Room:** Stage 12
- **Event:** World Congress 2026 North America

## Description

Security should accelerate development—not become a late-stage gate or a pile of disconnected tools. In this hands-on workshop, you’ll use GitHub’s native DevSecOps capabilities to protect an application throughout its delivery lifecycle: catch leaked secrets before they land, identify vulnerable dependencies and insecure code in pull requests, and harden GitHub Actions with least-privilege permissions and secure cloud identity.

Starting with a deliberately vulnerable sample repository, we’ll detect, remediate, and prevent common issues using GitHub Advanced Security and GitHub Actions. You’ll leave with practical patterns for creating a secure developer workflow that gives teams fast, actionable feedback while producing a more trusted path to production. GitHub’s DevSecOps capabilities support code scanning, secret protection, dependency security, and workflow automation directly in the developer workflow.

## Speaker

### [Sam Jarvinen](https://www.wearedevelopers.com/@sam-jarvinen)

Senior Solutions Engineer, GitHub


## Related talks at this congress

- [GitHub Actions](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1854-github-actions) — Austen Stone
- [Securing the Agentic Stack: Docker Hardened Images and Supply Chain Security](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1882-securing-the-agentic) — Ajeet Raina
- [The Autonomous Pull Request: Let Agents Ship Without Surrendering Control](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1791-the-autonomous-pull) — Sam Jarvinen
- [How GitHub Helps Two Maintainers Serve 6,000 Learners](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1857-how-github-helps-two) — Gwyneth Peña-Siguenza

## Watch remotely

Can’t make it to San José? Watch this session live with Pro. You also get:

- All full videos, bookmarks, and playlists
- World Congress livestreams

[See pricing](https://www.wearedevelopers.com/pricing)

## Links

- [Get tickets](https://www.wearedevelopers.com/world-congress-north-america/tickets)