// GitHub Advanced Security

Your monthly digest of everything happening across Azure, GitHub, and Azure DevOps — so you don't have to keep up with it all yourself! In this January 2022 roundup, Chris returns to the channel after a break with an honest discussion about mental health and burnout, recaps Cloud With Chris highlights from 2021, and covers a packed set of updates: AKS improvements (containerd GA, FIPS node pools, Kubernetes version aliasing), Static Web Apps Enterprise Grade Edge GA, Azure Cognitive Search semantic updates, Azure Monitor 1-minute frequency log alerts, GitHub Advanced Security, GitHub Projects, Dependabot, and much more. Plus an outlook for what's changing on the channel in 2022.

A double episode catching up on two weeks of Azure updates including AKS scale down modes, Cosmos DB Functions v4, and Azure Functions runtime 4.0 with .NET 6, plus GitHub CLI 2.0, Advanced Security secret scanning APIs, and a look at secretless application patterns with managed identities.

Security vulnerabilities don't wait to be discovered — and developers are often unknowingly shipping them through open source dependencies. In this episode, Chris is joined by DeveloperSteve Coochin, Developer Advocate at Snyk, to explore the real-world state of vulnerabilities in modern applications. Steve shares findings from his research into the PHP ecosystem and explains how developers can shift vulnerability detection left — catching CVEs in dependencies before they reach production, by integrating tools like Snyk directly into their CI/CD pipelines and GitHub workflows.

Recorded on a Monday morning after a sunny weekend, vlog #24 delivers the week's Azure, Azure DevOps, and GitHub news — covering Azure Virtual Desktop's rebrand, enterprise-scale landing zones for AKS, Azure Migrate private endpoint support, and GitHub supply chain security updates. Chris also recaps recent Cloud with Chris sessions on GitHub Actions, Azure Arc for apps, hybrid cloud, and the Geode pattern, then previews the upcoming Azure VMware Solution session with Shannon Keane and John Lund's cloud journey.

Chris rounds up the week's Azure, Azure DevOps, and GitHub news — including the rebrand of Windows Virtual Desktop to Azure Virtual Desktop, Azure FHIR healthcare API updates, SAP on Azure, and a preview of the Azure Arc hybrid and multi-cloud digital event. On the GitHub side, supply chain security takes the spotlight with package registry credential scanning, Dependabot enhancements, and GitHub's Blacktocat fifth anniversary celebrating Black voices in tech. Cloud with Chris recaps include Carl Cook on GitHub Actions, Azure Arc for apps (Event Grid), Sarah Lean on hybrid cloud and DevRel life, and Will Esprit demonstrating the Geode pattern hands-on.

Weekly Vlog #19 is broadcast live, opening with Azure's Fluent Design icon rebrand and covering key security and platform updates including the AKS Secret Store CSI driver add-on, Azure Security Center improvements for hybrid and multi-cloud Kubernetes, and new Azure VPN Gateway multi-authentication capabilities. GitHub Enterprise Server 3.1 launches with GitHub Actions, Packages, and Advanced Security, while the release radar spotlights Pulumi as an emerging cross-cloud infrastructure-as-code framework. Chris also recaps Cloud Gaming Notes episode four featuring Sudoku Social's Azure PlayFab backend and a new Cloud Drop on PowerShell in Azure Functions with Carol de Winter.

Weekly Vlog #18 arrives on a UK Bank Holiday, covering Microsoft's acquisition of Kinvolk to accelerate cloud-native investment and the preview launch of Azure Web PubSub — a managed WebSocket service for real-time applications. Chris reviews Delivery Plans 2.0 GA in Azure DevOps and GitHub engineering posts on feature flags and mono-repo performance optimisations, then shares a detailed update on the Hugo CrossPoster open-source project now featuring unit tests, SonarCloud analysis, and Polly resilience patterns including circuit breakers and retry logic.

In this Easter Sunday livestream, Chris covers Microsoft's Forrester Wave leader recognition for Azure Functions (FaaS), a wave of AKS updates including the new run command feature and Open Service Mesh add-on, and the GitHub Advanced Security security overview beta plus GA of secret scanning for private repositories. Delivery Plans 2.0 in Azure DevOps approaches GA with card styling and dependency visualisation, while GitHub Desktop gains cherry-pick support and GitHub Mobile adds working-hours notification controls. Cloud with Chris highlights include a beginner Git 101 Cloud Drop, a community blogging panel, the External Configuration and Claim Check architecture pattern episode with Peter Piper, and a preview of the upcoming Northern Azure User Group talk alongside Scott Hanselman.

Weekly Vlog #13 covers an action-packed Azure week: enterprise landing zones with modular designs, zonal disaster recovery via Azure Site Recovery, Security Center compliance enhancements, and Mark Russinovich's standout Ignite session on Azure innovation. The GitHub roundup highlights the GitHub Actions capture-the-flag security writeup and a multi-stage exploit chain from the GitHub Security Lab — essential reading for any DevSecOps practitioner. Cloud with Chris updates include the channel's most-viewed video to date on Git internals, a Fuse.js-powered site search, series navigation, and a packed April talk schedule featuring the Northern Azure User Group (alongside Scott Hanselman) and Global Azure Bootcamp.

Chris announces his involvement with relaunching the Azure Thames Valley meetup, recaps the static content hosting pattern episode and his open source blog, and previews upcoming talks at AzureIsh Live and a SquaredUp webinar on application observability with Azure Monitor and App Insights. He covers Azure Updates including public IP SKU upgrades, built-in Azure Policy for NSG flow logs, GitHub's availability in Iran, the GitHub Enterprise Server 3.0 release candidate, and Docker Desktop integration with Azure Container Instances.