Mitigate software supply chain risks in Github Actions | ODSP938
Github actions security Ci/cd security Supply chain attack Devops best practices Github secrets Workflow hardening Microsoft build 2026 Container security Dependency security Pipeline security
This session from Microsoft Build 2026 provides practical strategies for securing GitHub Actions workflows against supply chain attacks, covering secrets exposure risks, malicious code propagation, and dependency management. It targets DevOps engineers and security professionals responsible for CI/CD pipelines who want actionable hardening techniques including permission scoping, branch protection, and container verification.
Related videos
What Docker Sandboxes Get Right About AI Security
Run NanoClaw on MacBook Safely with Docker MicroVM Sandboxes
Spite-Driven Engineering: A New Blueprint for Cloud Security in the AI Native Era
Commit-Then-Disclose: Cryptographic SBOM Auditing Without IP Leakage - Sharvil Bhatt & Swastik Gour
Root Without Risk: A Decade-Long Quest for True Container Isolation - Sumir Broota
Tell us about the labs at Build
From Skeptic to Superpower: Real‑World AI Coding Workflows That Scale | BRK229
From CLI to PR: Automating the path to merged code | BRK203
Using AI tools to teach old apps new tricks | BRK220
Build context-aware agents: From data to decisions | BRK240
Build secure and enterprise-ready agents with Agent 365 | BRK251
