Free courses from frontend to fullstack and AI
AI, Data Science & Cloud Certificates from Google, IBM & Meta
Overview
Google, IBM & Meta Certificates – 40% Off
One plan covers every Professional Certificate on Coursera.
Unlock All Certificates
Explore the security vulnerabilities and protection strategies for GitHub IssueOps pipelines in this 14-minute conference talk from NDC Manchester 2025. Learn how the GitHub IssueOps approach, while simplifying automation, can create significant security risks when pipelines are not properly secured. Discover common implementation pitfalls and real-world attack scenarios that demonstrate how time-of-check to time-of-use issues, broken access controls, and GitHub API integration flaws can lead to remote code execution vulnerabilities. Master the techniques for threat modeling your automation workflows and implementing effective security mitigations to protect your IssueOps pipelines from becoming an attacker's playground.
Syllabus
Breaking and Protecting GitHub IssueOps Pipelines - Alexander Barabanov - NDC Manchester 2025
Taught by
NDC Conferences