In GitHub We Trust - 10 Ways You Could Get Pwned

Explore the security vulnerabilities that arise from developers' widespread trust in GitHub content in this conference talk from RSA Conference. Learn about ten specific attack vectors that malicious actors can exploit within GitHub's vast ecosystem to introduce backdoors into software development lifecycles. Discover how the platform's popularity creates unique security challenges, including the difficulty of detecting malicious code in open source projects compared to closely monitored public registries. Understand the emerging threats posed by misplaced trust in GitHub repositories and examine practical mitigation strategies to protect your development processes from these sophisticated attack methods.