Security best practices with GitHub Copilot

But did you know that GitHub Copilot can help you with some security best practices? We’ll show you how you can use it and other tools to help make your projects more secure from day one.

You’ll learn how to:

• Create a Threat Model using GitHub Copilot

• Ask Copilot to evaluate your Threat Model against your actual code

• Fix Code Scanning alerts directly in the IDE and GitHub UI

• Understand how Copilot’s pre-filters help reduce vulnerabilities in generated code

• Use custom instructions in VS Code to guide Copilot toward more secure code suggestions

• Configure repository or organization-level custom instructions to tailor Copilot’s behavior

• Surface GitHub Advanced Security (GHAS) results inside Copilot using MCP

Save your seat!