►
From YouTube: Accelerating software development safely with GitHub Enterprise - GitHub Universe 2020
Description
Presented by Maya Ross, Director of Product, Enterprise, GitHub
In this session, we are introducing the biggest ever GitHub Enterprise Server release, and a host of improvements to the GitHub Enterprise account to help you run your business securely and at scale. We'll show you how you can use GitHub Enterprise Server to manage your whole CI/CD pipeline using Actions, the number one CI solution on GitHub.com. You’ll also see how you can manage your packages, find security vulnerabilies before they hit production, and enable your developers to work on the go with GitHub’s mobile apps—for the first time ever on GitHub Enterprise Server.
For more from GitHub Universe 2020, visit https://githubuniverse.com
As always, feel free to leave us a comment below and don't forget to subscribe: http://bit.ly/subgithub
Thanks!
Connect with us.
Facebook: http://fb.com/github
Twitter: http://twitter.com/github
LinkedIn: http://linkedin.com/company/github
About GitHub
GitHub is the best place to share code with friends, co-workers, classmates, and complete strangers. Millions of people use GitHub to build amazing things together. For more info, go to http://github.com
A
A
So
myself
and
my
colleagues
spend
a
lot
of
time
talking
to
administrators
people
like
keith
who
run
devops
tooling
for
their
companies,
and
we
know
that
you've
got
a
lot
to
do
and
it's
pretty
hard.
Sometimes
you
have
to
secure
all
your
software
and
your
applications
across
the
supply
chain.
You
need
to
help
your
teams
to
automate
workflows,
so
they
can
focus
on
what
they
do
best.
A
Those
apps
are
amazing:
they
have
more
than
a
million
downloads
and
they're
gonna
enable
developers
to
collaborate
check.
Notifications
approve,
pull
requests
from
you
know
in
bed
in
the
bath
on
a
bus,
no
matter
where
they
are,
but
github
enterprise
sits
across
the
cloud
as
well,
and
we
have
a
few
hundred
companies
who
are
using
github
enterprise
in
a
hybrid
environment,
so
they're
using
both
enterprise,
server
and
enterprise
cloud
together,
and
I'm
going
to
show
you
some
ways
today
that
you
can
do
that.
A
So,
let's
talk
first
of
all
about
that
enterprise
foundation.
So
what
is
an
enterprise
account
at
github
for
those
of
you
who
haven't
seen
one
before
we'll
just
go
through
these
kind
of
basics,
so
an
enterprise
account
is
an
umbrella
around
your
users
and
around
your
organizations
for
many
companies.
It's
a
way
to
consolidate
different
orgs,
that
their
teams
have
spun
up
in
order
to
create
one
team
and
kind
of
one
governed
environment
and
that
secure
umbrella
for
your
team
comes
with
a
certain
set
of
capabilities
that
help
you
secure
and
govern
it.
A
A
Account
all
right,
so
here
we
have
a
enterprise
cloud
account
just
a
demo,
one
that
I
have
set
up
and
it
has
four
organizations
in
it.
You
can
have
any
number
of
orgs
that
you
want.
Some
companies
have
one
some
companies
have
thousands
or
even
tens
of
thousands
depending
on
how
they
want
to
manage
their
company,
and
each
of
these
organizations
can
have
different
security
and
governance
policies
applied
to
them.
A
I
can
also
see
all
of
the
people
in
my
company,
so
here
I
just
have
a
company
of
three
whole
people,
and
I
can
see
some
security
information
about
each
person.
Now
I
mentioned
that
you
can
use
enterprise
in
a
hybrid
way
here.
One
of
the
things
you
can
do,
if
you
have
both
cloud
and
server,
is
to
see
all
of
your
users
across
both
environments
and
that
is
enabled
through
github
connect.
A
If
I
jump
into
my
security
settings,
I
can
have
a
look
at
some
of
those
ip
security
settings.
So,
first
of
all,
the
one
that
most
companies
set
up
first
is
saml
authentication,
this
delegates
authentication
to
your
identity
provider.
Here
I
have
this
set
up
with
octa,
so
you
can
see
I
could
sign
in.
Of
course,
it
will
just
sign
me
straight
in
oh
no,
it
won't
and
that
ensures
that
all
of
your
enterprise
assets
can
only
be
accessed
by
people
signed
in
through
your
idp.
A
We've
also
recently
added
support
for
automated
provisioning
and
deprovisioning
for
anyone
using
octa.
So
this
means
that
whenever
somebody
joins
your
organization
or
leaves
it
their
account
will
be
created
or
removed
automatically.
This
is
particularly
great
when
you're
off
boarding
people
and
you
want
to
remove
access
quickly.
A
Iplowless
is
one
of
our
more
advanced
conditional
access
policies
and
it
enables
you
to
ensure
that
your
enterprise
resources
can
only
be
accessed
by
people
in
your
corporate
network.
Here
I
have
a
couple
set
up
moving
on,
let's
have
a
look
at
verified
domains.
So,
as
I
mentioned,
this
is
one
of
our
newer
features.
It's
just
about
to
launch
in
beta,
and
what
this
enables
you
to
do
is
to
ensure
that
no
data
is
lost
through
the
email
channel.
A
A
You
can
see.
All
I
need
to
do
is
to
add
this
to
my
dns
record
and
then
the
domain
will
be
verified
within
a
couple
of
days
hopping
over
to
that
audit
log.
So,
of
course,
the
ability
to
audit
the
whole
enterprise
is
crucially
important,
and
here
we
have
a
single
view
of
all
events
that
are
going
on
across
all
organizations
and
all
users.
A
A
Now,
let's
just
hop
in
to
one
of
my
organizations
we're
going
to
look
at
optodemo
platform,
so
here
you
can
see
we
have
a
couple
of
repos.
These
are
internal
repos,
which
means
they're
visible
by
everyone
across
my
enterprise,
internal
repos
are
really
the
foundation
of
inner
sourcing
with
github,
and
one
of
these
repos
is
building
a
company
wiki.
A
Private
pages
again
is
another
new
feature
which
is
in
beta
now
and
which
is
gonna
launch
for
everybody
before
the
end
of
the
year,
and
what
it
means
is
that
you
can
create
pages,
just
as
you
know,
and
love
them
with
github,
which
are
only
accessible
by
people
in
your
enterprise,
and
the
visibility
is
built
of
the
visibility
of
your
repo.
So
this
is
an
internal
repo,
which
means
the
page
bill
offer
is
visible
by
everyone.
A
In
my
enterprise
perfect
for
company
wikis,
in
fact,
we
use
a
private
page
for
the
github
intranet
and
our
engineering
wiki.
Here's
a
basic
example.
One
of
the
other
things
I
really
like
about
private
pages.
Is
this
edit
flow.
So
now,
since
I
have
write
access
on
that
repo,
I
can
edit,
the
private
page
directly
from
here.
A
Let's
just
go
back
to
my
wiki
just
want
to
touch
briefly
on
some
branch
protection
rules
and
how
we're
extending
them.
You
might
have
seen
a
little
bit
of
this
in
the
keynote.
If
you
manage
to
watch
it
so
here
I
have
a
couple
of
branch
protection
rules
set
up,
which
means
that
any
code
changes
need
to
be
reviewed
first
of
all
by
a
third
party
and
then
by
my
code
owners.
Normally
often,
a
security
or
expert
team
before
they're
merged
in
github
has
also
recently
expanded
the
same
concept
to
environment
protection
rules.
A
A
We
can
see
a
pull
request
that
has
been
merged
in
and
then
deployed
through
my
environments
and,
as
per
my
rule,
it
has
been
approved
by
me.
This
is
one
of
the
biggest
things
that
we've
shipped
in
the
last
few
months.
Chris
pat
is
doing
a
talk,
deep,
diving
into
this
new
experience.
I'd
really
encourage
you
to
go
watch
it
if
you
can
all
right.
So,
let's
just
hop
back
here.
A
A
I
think
this
is
going
to
make
a
big
difference
to
the
overall
reliability
of
the
product,
and
I'm
excited
for
this
change.
If
you
have
any
thoughts
on
this
love
to
chat
to
you
about
it
in
the
discussion
later
so
just
moving
on
to
those
other
pillars,
I'm
just
going
to
do
a
quick
whiz
round,
some
of
the
other
main
capabilities
that
you
get
through
github
enterprise.
A
So,
first
of
all,
I'm
going
to
decide
which
of
my
orgs
should
have
access
to
actions
this.
You
people
usually
decide
based
on
managing
cost,
and
I'm
gonna
enable
just
my
ml
team
to
have
it.
I
can
also
decide
whether
to
allow
all
actions,
including
actions
from
the
marketplace,
just
ones
we've
built
or
select
actions,
for
example,
ones
created
by
github,
I'm
going
to
allow
all
actions
and
these
the
marketplace
actions
are
going
to
be
available
to
my
private
enterprise
server
instance,
because
I
have
enabled
github
connect.
A
A
I
can
also
set
my
log
retention
period,
I'm
going
to
make
that
a
long
time
and
I
don't
want
to
lose
any
data
and
then
I'm
going
to
set
up
a
couple
of
self-hosted
runners.
So
it's
super
easy
to
set
up
takes
about
five
or
ten
minutes
to
get
all
of
your
runners
configured
again.
I
can
decide
whether
to
make
them
those
runners
available
to
the
whole
enterprise
or
just
selected
organizations.
A
A
A
In
addition,
we
also
have
a
template
that
my
org
administrator
has
made.
For
me,
it's
a
mlt
ci
workflow,
and
this
is
a
workflow
template.
That's
available
across
my
organization
next
year,
we'll
be
adding
enterprise-wide
templates
as
well,
which
will
be
great
particularly
for
companies
operating
in
more
high-compliance
high-governed
environments.
A
Let's
just
go
back.
The
next
thing
I
wanted
to
cover
briefly
is
security
and
how
you
can
simplify
and
automate
that
so
as
kind
of
keith
talked
about
just
previously,
finding
and
fixing
vulnerabilities
is
really
notoriously
difficult,
and
this
is
very
much
a
structural
issue.
We
have
575
570
times
more
developers
in
the
world
than
security
researchers
and,
as
we
keep
coding,
we
keep
introducing
new
vulnerabilities,
we're
not
getting
any
better
at
just
naturally
spotting
vulnerabilities,
so
github.
A
Our
approach
to
addressing
this
problem
is
to
bring
that
community,
together
with
the
right
tooling,
to
help
you
secure
code.
Now
our
security
capabilities
have
grown
massively
over
the
last
year.
Advanced
security
offers
both
code
scanning
and
secret
scanning,
which
are
automated
security
scanning
tools
and
in
addition
to
that,
our
dependency
alerts,
automated
security
fixes
in
the
advisory
database
and
making
sure
that
both
private
and
open
source
repos
are
staying
secure.
A
Let's
have
a
brief
look
again
at
how
this
is
operating
on
enterprise
server,
3.0,
okay.
So
here
I
have
another
enterprise
server
instance,
and
it
has
a
repo
setup.
The
first
thing,
you'll
notice,
is
that
we
have
found
some
security
vulnerabilities
in
my
dependencies
now.
This
information
is
coming
from.
The
github
depend
advisory
database,
which
is
on
github.com,
and
it's
coming
to
my
private
environment
again
through
github
connect,
so
we're
bringing
actions,
we're
bringing
user
information
and
we're
bringing
the
security
information
into
your
private
environment
through
connect.
A
A
Here's
an
example
of
one
that's
under
development
right
now,
written
by
jonathan,
who
is
a
github
staff
and
a
security
researcher
in
boston
and
through
code
scanning
we're
going
to
bring
his
knowledge
expertise
and
the
work
he's
doing
to
contribute
to
this
directly
to
your
company
going
back.
Let's
just
look
quickly
at
my
secret
scanning
alerts.
Secret
scanning
has
picked
up
that
I
have
put
in
two
aws
secrets,
and
this
is
a
very
common
way
that
customer
data
is
stolen.