Engineering@Microsoft

How Microsoft empowers its developers to deliver at massive scale

security - Engineering@Microsoft

Your Most Important Git Repos

August 24, 2023 Aug 24, 2023 08/24/23
Bryan Sullivan
What do you keep in your Git repos? Source code for your production applications certainly, but you probably also keep a fair amount of experimental and “hackathon” code. Maybe you keep your documentation in Git. Maybe, like the District of Columbia does, you even keep legal documents there. So which of these are the most important to ...

The Journey to Secure the Software Supply Chain at Microsoft

May 22, 2023 May 22, 2023 05/22/23
Adrian Diglio
A secure software supply chain represents another facet of Microsoft's built-in security to enhance and maintain trust in our products. It’s a continuation of the journey we embarked upon since the launch of Security Development Lifecycle (SDL) in 2004 and represents our commitment to continually enhance Microsoft’s foundational security.
Comments are closed.0 3

Caesar, standards, and SAST: The road to SARIF

September 27, 2021 Sep 27, 2021 09/27/21
Michael C. Fanning
In this post, Michael Fanning gives us a short history on standards (think Julius Caesar), how consensus on something very small can enable something very large, and how all of it relates to the design of the ‘Static Analysis Results Interchange Format’ (SARIF).
Comments are closed.0 0

Separating the signal from the noise

July 6, 2021 Jul 6, 2021 07/6/21
Bryan Sullivan
If a security tool catches a critical vulnerability, but also reports 99 other findings that turn out to be false positives, developers are going to ignore everything that the tool reports and then miss the important issues. Bryan Sullivan talks through how you can hone your tooling to separate the signal from the noise.