I don't believe in perfection, I believe in continuous improvement. Building dev-sec bridges @GHSecurityLab @GitHub (ex @Semmle). All views are my own.

Palo Alto, CA
Joined April 2012
Xavier René-Corail retweeted
Find the GitHub Security Lab now on LinkedIn, Mastodon and Bluesky! 👇
7
5
1
10
7,922
🔴 Nos visita desde España Alvaro Muñoz (AKA @pwntester) investigador de @GHSecurityLab para hablar con @fede_k y @Gala_chip. En vivo desde el LADO B de la #EKO2024: twitch.tv/ekoparty
4
12
1,458
Los participantes del juego de @GHSecurityLab at @ekoparty Seraffina y Zerick: vengan al stand para recibir Swag!
1
212
CodeQL for securing GitHub Actions. @pwntester from the @GHSecurityLab is taking the stage at @ekoparty now! #ekoparty2024
¡No te pierdas esta charla si quieres utilizar GitHub Actions de forma segura! Únete a @pwntester a las 14:45 SALA A2 #EKO2024
2
301
Xavier René-Corail retweeted
Si estás en @ekoparty #EKO2024, ¡Juega un juego con nosotros! Ponte en la piel de un miembro del equipo de GitHub Security que enfrenta un desafío de vulnerabilidad crítica. Evaluará riesgos, recomendará soluciones y utilizará herramientas de seguridad para proteger GitHub y la comunidad. Visita gh.io/ekogame y ven al stand de GitHub para mostrar tus puntuaciones en los juegos 1 y 2 y tener la oportunidad de ganar un obsequio exclusivo de GitHub
2
3
950
Xavier René-Corail retweeted
¡Hola visitantes de @ekoparty #EKO2024! El equipo de GitHub ha preparado un programa increíble para ti. Acércate al stand para tomarte una selfie, ganar regalos, coleccionar pegatinas y conocer a nuestros expertos. Lea más en gh.io/eko2024
1
3
850
Xavier René-Corail retweeted
La semana que viene estare por la @ekoparty hablando de vulnerabilidades en GitHub Actions y como extendi CodeQL para encontrarlas a escala. Llevo años queriendo ir a la Eko, sueño cumplido y encima en su 20 aniversario! Muchas ganas!
1
5
1
26
3,541
With my friend @XCorail at @github universe, it's always nice to meet you 💙 Thanks for your time for the chat.
1
10
533
Xavier René-Corail retweeted
Want to learn how to secure your browser extensions? Read our latest blog post where we talk about the security model of browser extensions and how developers can keep them secure. github.blog/security/vulnera…
1
8
1
27
2,206
Xavier René-Corail retweeted
Join us at #GitHubUniverse! The Security Lab will also be there! Reach out if you want to discuss all things security and Open Source security!
Dive into the security track at #GitHubUniverse with us! 🔒 Join us October 29-30 Find out more: githubuniverse.com/?utm_sour…
4
2
5
1,513
Xavier René-Corail retweeted
📣 Copilot Autofix is now available for free for open source! Fix vulnerabilities as fast as they're found⚡ Check it out! github.blog/changelog/2024-0…
9
56
9
274
58,172
Xavier René-Corail retweeted
Who's at @linuxfoundation's #SOSSCommunity Day Europe in 🇦🇹 Vienna, Austria? Join @jkcso on an insightful journey and hear about the success story of gh.io/secure-code-game, an open-source game for developing software security skills, that already attracted over 6,000 developers! ℹ️ Thursday September 19, 2024 12:10 CEST events.linuxfoundation.org/s…
3
6
1,308
Xavier René-Corail retweeted
Harris rn killing a baby in his 78th year
1,180
24,419
1,605
194,787
6,102,288
Xavier René-Corail retweeted
To continue your security journey, you will find many other resources on our website at securitylab.github.com/open-… such as our Secure Code Game, our introduction to CodeQL, or how to use our GitHub Advisory Database. 3/3
1
886
Xavier René-Corail retweeted
From code scanning for exposed secrets or vulnerabilities, to dependency scanning, follow these “5 easy steps to secure your open source project” to enable tooling that’s free for open source and will keep your users safe. gh.io/5-steps-security 2/
1
1
2
931
Xavier René-Corail retweeted
Open source maintainers and contributors, have you read the news? GitHub will bring Copilot Autofix to your pull requests at no cost, starting in September, to help you detect and remediate security vulnerabilities faster. 🥳 github.blog/news-insights/pr…
This Post is from an account that no longer exists. Learn more
3
12
2,708
I am at Black Hat in Vegas! Find me and fix … everything! Booth 768! #foundmeansfixed
We're at @BlackHatEvents in Vegas this week! Come chat with us at our booth and find out how "found means fixed". Learn more 👉 #BHUSA resources.github.com/github-…
1
8
788
Xavier René-Corail retweeted
I founded a new company: @xbow. XBOW brings AI to offensive security, augmenting the productivity of pentesters, bug hunters and security researchers.
4
16
2
78
15,084