DeveloperWeek 2025: Full Schedule

arrow_back View All Dates

2:00pm PST

PRO WORKSHOP: GitHub Actions: Make Them Work for You! LIMITED

Tuesday February 11, 2025 2:00pm - 2:50pm PST

Eleftherios Chrysochoidis, Chubb, Lead API Software Engineer

GitHub Actions offer robust and free CI/CD capabilities to streamline your development process. In this presentation, we'll dive into the core components of GitHub Actions and explore how they can be set to work for you by demonstrating various simple and advanced use cases!

GitHub Actions is an ideal tool for any project hosted on GitHub. It provides CI/CD features out of the box and is accessible to everyone without the need for extra infrastructure or setup. The declarative way of creating Actions makes their usage really easy, and its remarkable free layer provides sufficient limits even for big projects.

Especially for Open Source projects, where usually there is more than a single contributor, the need for CI/CD is huge. What will happen if you own an open source project and someone creates a Pull Request with really nice features but adds Security risks in the project (e.g. due to deprecated dependencies) or if they break some of the existing functionality? Would you be able to check all of them on your own? Maybe yes, but it would take much more time compared to having them all checked automatically by utilizing GitHub Actions.

Join me to explore how to make GitHub Actions run faster by utilizing caching mechanisms, build Reports for Testing, Coverage and Security issues and integrate them with any open Pull Request in the community, to have an automated evaluation of the suggested PR and get notifications for them.

Speakers

Eleftherios Chrysochoidis

Lead API Software Engineer, Chubb

Experienced Lead Software Engineer with Passion for Community EngagementWith over six years of experience in software engineering, building and maintaining robust applications, Eleftherios (or simply Lefteris) gained a deep expertise in Java and Spring Boot technologies.His passion... Read More →

Tuesday February 11, 2025 2:00pm - 2:50pm PST
DevExec World Stage

OpsWorld

Tracks & Topics DevOps, DevOps Certificate, Open Source Strategy
Session Type PRO Workshop Day (Tues)
Conferences OpsWorld
In-Person/Virtual In Person

3:00pm PST

PRO WORKSHOP: Bolster Your Bug Bounty – Code Search & Variant Analysis Techniques LIMITED

Tuesday February 11, 2025 3:00pm - 3:50pm PST

DeveloperWeek PRO Stage

Milan Williams, Semgrep, Senior Product Manager
Austin Theriault, Semgrep, Software Engineer

With so many repositories, organizations can struggle to locate and remediate recurring insecure code patterns. In this talk, you will understand the fundamentals of bug bounty programs, their importance, and common inefficiencies. Attendees will learn how to perform variant analysis, refine searches to reduce false positives and find vulnerabilities quickly. By leveraging these techniques, security teams can identify and reuse previous findings, extending the impact of their bug bounty program and significantly reducing costs. This technical session also provides a detailed architectural overview of building an in-house code search engine, drawing from our own experience. We'll share our wins & woes through multiple iterations, lessons learned, and preferred technologies. Our session concludes with a practical end-to-end walkthrough of a sanitized bug bounty report. Join us to gain knowledge to implement these strategies and technologies in your own engineering practice.

Speakers

Austin Theriault

Software Engineer, Semgrep

Milan Williams

Senior Product Manager, Semgrep

Milan Williams is a Senior Product Manager at Semgrep, where she helps security engineers and developers work together to ship secure software. She recently graduated from Harvard University with degrees in Computer Science and Physics. In her free time, you can find her running in... Read More →

Tuesday February 11, 2025 3:00pm - 3:50pm PST
DeveloperWeek PRO Stage

OpsWorld

Tracks & Topics Enterprise, DevOps
Session Type PRO Workshop Day (Tues)
Conferences OpsWorld
In-Person/Virtual In Person