Uploaded August 2026 | Updated September 2026, 2 weeks ago
Security isn't just the security team's job.
In this episode of New Breakpoint, Michelle Sandford is joined by George Coldham, Cloud Solution Architect at Microsoft, to explore how developers can use GitHub and GitHub Copilot to make security a natural part of their everyday workflow.
Through a live demo, George shows how to identify exposed secrets, detect vulnerable dependencies, improve code quality, and leverage AI-powered tools to address issues before they reach production.
Whether you're an experienced developer or just getting started, you'll learn practical ways to build more secure applications while maintaining speed and productivity, and why human accountability remains critical in AI-assisted development.
Learn more about the series: https://aka.ms/NewBreakpoint/r
Check out the resources: https://aka.ms/new-breakpoint/log
00:00 Introduction
03:49 Demo Application Overview
09:21 Security Is Everyone's Responsibility
12:23 Discovering an XSS Vulnerability
20:13 Using GitHub Copilot to Fix Security Issues
22:24 Testing and Validating the Fix
26:08 Pull Requests, Reviews & Branch Protection
31:24 Security & Quality Dashboard
33:24 Code Scanning, Secret Scanning & Dependabot
34:33 Copilot Autofix and Security Remediation
37:10 Managing Package Vulnerabilities
44:04 Secret Management & Push Protection
49:38 CI/CD Security Validation
51:20 GitHub Copilot Optimization Tips
55:22 Security-First Development Practices
57:28 Closing & Resources
[eventID:27494]
Security isn't just the security team's job.
In this episode of New Breakpoint, Michelle Sandford is joined by George Coldham, Cloud Solution Architect at Microsoft, to explore how developers can use GitHub and GitHub Copilot to make security a natural part of their everyday workflow.
Through a live demo, George shows how to identify exposed secrets, detect vulnerable dependencies, improve code quality, and leverage AI-powered tools to address issues before they reach production.
Whether you're an experienced developer or just getting started, you'll learn practical ways to build more secure applications while maintaining speed and productivity, and why human accountability remains critical in AI-assisted development.
Learn more about the series: https://aka.ms/NewBreakpoint/r
Check out the resources: https://aka.ms/new-breakpoint/log
00:00 Introduction
03:49 Demo Application Overview
09:21 Security Is Everyone's Responsibility
12:23 Discovering an XSS Vulnerability
20:13 Using GitHub Copilot to Fix Security Issues
22:24 Testing and Validating the Fix
26:08 Pull Requests, Reviews & Branch Protection
31:24 Security & Quality Dashboard
33:24 Code Scanning, Secret Scanning & Dependabot
34:33 Copilot Autofix and Security Remediation
37:10 Managing Package Vulnerabilities
44:04 Secret Management & Push Protection
49:38 CI/CD Security Validation
51:20 GitHub Copilot Optimization Tips
55:22 Security-First Development Practices
57:28 Closing & Resources
[eventID:27494]
