
I don't believe in perfection, I believe in continuous improvement. Building dev-sec bridges @GHSecurityLab @GitHub (ex @Semmle). All views are my own.
Palo Alto, CA
Joined April 2012
- Tweets1.3K
- Following404
- Followers601
- Likes927
Xavier René-Corail retweeted
🔴 Nos visita desde España Alvaro Muñoz (AKA @pwntester) investigador de @GHSecurityLab para hablar con @fede_k y @Gala_chip. En vivo desde el LADO B de la #EKO2024: twitch.tv/ekoparty
Los participantes del juego de @GHSecurityLab at @ekoparty Seraffina y Zerick: vengan al stand para recibir Swag!
CodeQL for securing GitHub Actions. @pwntester from the @GHSecurityLab is taking the stage at @ekoparty now! #ekoparty2024
¡No te pierdas esta charla si quieres utilizar GitHub Actions de forma segura! Únete a @pwntester a las 14:45 SALA A2 #EKO2024
Xavier René-Corail retweeted
Si estás en @ekoparty #EKO2024, ¡Juega un juego con nosotros! Ponte en la piel de un miembro del equipo de GitHub Security que enfrenta un desafío de vulnerabilidad crítica. Evaluará riesgos, recomendará soluciones y utilizará herramientas de seguridad para proteger GitHub y la comunidad. Visita gh.io/ekogame y ven al stand de GitHub para mostrar tus puntuaciones en los juegos 1 y 2 y tener la oportunidad de ganar un obsequio exclusivo de GitHub
Xavier René-Corail retweeted
¡Hola visitantes de @ekoparty #EKO2024! El equipo de GitHub ha preparado un programa increíble para ti. Acércate al stand para tomarte una selfie, ganar regalos, coleccionar pegatinas y conocer a nuestros expertos. Lea más en gh.io/eko2024
Xavier René-Corail retweeted
La semana que viene estare por la @ekoparty hablando de vulnerabilidades en GitHub Actions y como extendi CodeQL para encontrarlas a escala. Llevo años queriendo ir a la Eko, sueño cumplido y encima en su 20 aniversario! Muchas ganas!
Xavier René-Corail retweeted
Want to learn how to secure your browser extensions? Read our latest blog post where we talk about the security model of browser extensions and how developers can keep them secure. github.blog/security/vulnera…
Xavier René-Corail retweeted
🔒 Secure your open-source supply chain! Discover why CVEs are crucial for protecting software dependencies in @taladrane's latest blog post: github.blog/security/supply-… #Cybersecurity #OpenSource #CVEs
Xavier René-Corail retweeted
Join us at #GitHubUniverse! The Security Lab will also be there! Reach out if you want to discuss all things security and Open Source security!
Dive into the security track at #GitHubUniverse with us! 🔒 Join us October 29-30
Find out more: githubuniverse.com/?utm_sour…
Xavier René-Corail retweeted
📣 Copilot Autofix is now available for free for open source!
Fix vulnerabilities as fast as they're found⚡ Check it out!
github.blog/changelog/2024-0…
Xavier René-Corail retweeted
Who's at @linuxfoundation's #SOSSCommunity Day Europe in 🇦🇹 Vienna, Austria?
Join @jkcso on an insightful journey and hear about the success story of gh.io/secure-code-game, an open-source game for developing software security skills, that already attracted over 6,000 developers!
ℹ️ Thursday September 19, 2024 12:10 CEST events.linuxfoundation.org/s…
Xavier René-Corail retweeted
Follow these five easy steps to make sure your open source project is as secure as possible. 🔐
gh.io/5-steps-security
Xavier René-Corail retweeted
To continue your security journey, you will find many other resources on our website at securitylab.github.com/open-… such as our Secure Code Game, our introduction to CodeQL, or how to use our GitHub Advisory Database. 3/3
Xavier René-Corail retweeted
From code scanning for exposed secrets or vulnerabilities, to dependency scanning, follow these “5 easy steps to secure your open source project” to enable tooling that’s free for open source and will keep your users safe. gh.io/5-steps-security 2/
Xavier René-Corail retweeted
Open source maintainers and contributors, have you read the news? GitHub will bring Copilot Autofix to your pull requests at no cost, starting in September, to help you detect and remediate security vulnerabilities faster. 🥳
github.blog/news-insights/pr…
This Post is from an account that no longer exists. Learn more
I am at Black Hat in Vegas! Find me and fix … everything! Booth 768!
#foundmeansfixed
We're at @BlackHatEvents in Vegas this week! Come chat with us at our booth and find out how "found means fixed". Learn more 👉 #BHUSA resources.github.com/github-…
Xavier René-Corail retweeted
I founded a new company: @xbow. XBOW brings AI to offensive security, augmenting the productivity of pentesters, bug hunters and security researchers.














