Lightning Talk: My First Supply Chain Security Pull Request as a 13-Year-Old
summary
A middle schooler describes finding that gh CLI (cli/cli) lacked automated dependency updates, then added Dependabot config to the repo using the GitHub platform and the gh tool, submitted a lightweight fix and saw the PR merged into cli/cli, enabling regular vulnerability and update alerts; background details include competitive coding experience like 500 LeetCode problems and a CodeCombat rank of ~16 out of 50,000 that motivated rigorous testing.
AI-written summary · about
related talks
38mFortifying Your Codebase with GitHub
52mGitHub Actions Security: From CI Nightmare to Supply Chain Sentinel
27mBuilding a Secure Open Source Project on GitHub
30mSecuring the software supply chain together
25mWhen the supply chain hits a sour note
26mSmarter Code, Sneakier Risks: Supply Chain Security in the Age of AI
36mSupply-Chain Security, Outside in: What Helping ~200 Projects Improve Their Security Looks Like
32mBreaking the Chain: Advanced Offensive Strategies in Software Supply Chain