WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2026 Europe • Jul 9, 2026 • Session details

Spot, Squash, Secure: Fighting Security Bugs with GitHub Copilot

Malte Lantin , Marie Theresa Brosig

Pure AI security scanning is costly and highly unreliable. Learn how pairing deterministic CodeQL tests with GitHub Copilot Autofix creates a flawless, scalable vulnerability remediation workflow.

Pause
Mute Enter Fullscreen
#1 about 3 min

Building a vulnerable application for security testing

Demonstrating the security risks of generating code with artificial intelligence tools.

#2 about 5 min

Challenges of using AI for standalone security scanning

Discovering why pure artificial intelligence code scanning is potentially costly and non-deterministic.

#3 about 5 min

Combining static analysis with AI scanning tools

How combining deterministic code analysis with artificial intelligence improves security scanning capabilities.

#4 about 4 min

Automating vulnerability remediation with Copilot Autofix

Using agentic tools to automatically generate and validate pull requests for identified security vulnerabilities.

#5 about 2 min

Validating AI generated code fixes in CI pipelines

Creating a robust continuous integration loop where deterministic checks validate machine generated solutions.

#6 about 2 min

Finding contextual secrets and managing enterprise AI costs

Balancing advanced capabilities like secret scanning with application token costs at an enterprise scale.

#7 about 3 min

Tracking AI agents in commit history and auditing

Achieving end-to-end transparency by viewing artificial intelligence agents as independent actors in repository change logs.

#8 about 3 min

Addressing deterministic exceptions and custom agent availability

Exploring ways to combine external API results with agent instructions and non-native platform compatibility.

Matching moments

4:15 min

Security integration and AI skepticism in developer tooling

Chris Heilmann +2 · LIVE

3:37 min

Managing security risks in AI-accelerated development processes

Carey Liu Carey Liu · WWC Europe 2026

1:29 min

Assisting security analysis using AI code review tools

Matteo Meucci Matteo Meucci · Europe 2026 Virtual

2:43 min

Solving the vulnerability remediation bottleneck using AI autofix

Joseph Katsioloudes Joseph Katsioloudes · WWC 2025

1:30 min

Exponential code growth and emerging security vulnerabilities in sprints

Milin Desai Milin Desai +3 · WWC Europe 2026

1:09 min

Expanding AI agents for code review and security scanning

Nimrod Kor Nimrod Kor · WWC Europe 2026

More from World Congress 2026 Europe

Building the Nervous System of AI - Michael Kagan (NVIDIA) thumbnail
29:17
about 1 month ago

Building the Nervous System of AI - Michael Kagan (NVIDIA)

Michael Kagan, Sead Ahmetović

Five Things in Tech that Matter Now - WeAreDevelopers World Congress 2026 Closing Keynote thumbnail
19:41
about 1 month ago

Five Things in Tech that Matter Now - WeAreDevelopers World Congress 2026 Closing Keynote

Christian Heilmann

The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend thumbnail
32:06
about 1 month ago

The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend

David vonThenen

Super scaling for the Super Bowl: How to survive 30 million users hitting your backend in 30 minutes thumbnail
35:13
about 1 month ago

Super scaling for the Super Bowl: How to survive 30 million users hitting your backend in 30 minutes

Irina Branovic

Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬 thumbnail
24:23
about 1 month ago

Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬

Jeremy Murray

Angstfreude - AI and Corporate Culture - The Thrill and the Threat thumbnail
30:26
about 1 month ago

Angstfreude - AI and Corporate Culture - The Thrill and the Threat

Axel Ebert, Karin Krobath

Upcoming sessions on this topic

Open session

World Congress 2026 North America

The Things Your AI Isn't Telling You

Desmond Lamptey

Lead Software Engineer @ Capital One

Desmond Lamptey
Open session

World Congress 2026 North America

SecurePrompt: Building a Pre-Flight Security Layer for Agentic AI

Ravi Sastry Kadali

AI/ML Engineer at General Motors

Ravi Sastry Kadali
Open session

World Congress 2026 North America

GitHub’s Team X-Ray: Your Repository Knows More About Your Team Than Your Team Does

Andrea Griffiths

Senior Developer Advocate

Andrea Griffiths
Open session

World Congress 2026 North America

Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale

Abdel Fane

Founder of OpenA2A

Abdel Fane
Open session

World Congress 2026 North America

rm -rf: Horror Stories From Unsandboxed AI Agents (and How Docker Fixes This)

Rishab Kumar

Staff Developer Evangelist @ Twilio

Rishab Kumar
Open session

World Congress 2026 North America

The Broken Rung: How AI is Rebuilding Software Development from the Ground Up

Tomislav Tipurić

Chief Technology Officer, Nephos

Tomislav Tipurić

Related videos

Real-World Security for Busy Developers thumbnail
29:50
WWC 2025 • 12 months ago

Real-World Security for Busy Developers

Kevin Lewis

The transformative impact of GenAI for software development and its implications for cybersecurity thumbnail
25:19
WWC 2024 • almost 2 years ago

The transformative impact of GenAI for software development and its implications for cybersecurity

Chris Wysopal

Your AI Ships Code Faster Than Anyone Can Review It thumbnail
4:27
WWC Europe 2026 • about 1 month ago

Your AI Ships Code Faster Than Anyone Can Review It

Rasmus Klärck

How GitHub secures open source thumbnail
25:28
WWC 2025 • 12 months ago

How GitHub secures open source

Joseph Katsioloudes

The New AI Security Stack: Observe, Detect, Protect thumbnail
30:16
WWC Europe 2026 • about 1 month ago

The New AI Security Stack: Observe, Detect, Protect

Milin Desai, Christian Trummer, Jyoti Bansal, Tomislav Tipurić

Building the next generation of AI developer tools thumbnail
30:34
WWC Europe 2026 • about 1 month ago

Building the next generation of AI developer tools

Krzysztof Cieślak

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.