Adoption of AI-powered tools for development is trending. It changes the way we write and ship code, simplifies collaboration, and fundamentally changes how we can prevent vulnerabilities from entering our code. How can we use AI assistants to build and ship with confidence? In my session, we use GitHub Copilot as an example to illustrate which measures are in place "out of the box" and where to pay special attention to ensure your code follows security standards.
- AI-assisted development status - Measures for preventing vulnerabilities from entering generated code - AI-assistance in fixing vulnerabilities in existing code - Other aspects of security through a software development lifecycle (SDLC) - Recommendations on security-first GitHub Copilot usage - Live demo
Maxim Salnikov is a tech and cloud community enthusiast based in Oslo. With over two decades of experience as a web developer, he shares his extensive knowledge of the web platform, cloud computing, and AI by speaking at and providing training for developer events worldwide. By day, Maxim plays a crucial role in supporting the development of cloud and AI solutions within European companies, serving as the leader of developer productivity business at Microsoft. During evenings, he can be found running events for Norway's largest web and cloud development communities. Maxim is passionate about exploring and experimenting with Generative AI possibilities, including AI-assisted development. To share his insights and connect with like-minded professionals globally, he founded and organized the inaugural Prompt Engineering Conference, the first of its kind on a global scale.