Copilot for Security Custom Plugin for GitHub Advanced Security

A couple of days ago I released the initial preview version of two custom (unofficial!) plugins for Copilot for Security. These plugins expand the coverage of Copilot’s scope of interactions by incorporating information retrieved from GitHub Advanced Security (GhAS). You can find the plugins here: cfs/GitHubAdvancedSecurity-CustomPlugins at main · stefanpems/cfs

In this short series of articles I demonstrate how to install and utilize these two custom plugins. This serves as a comprehensive guide, detailing each configuration and usage step. It’s designed with security professionals in mind, particularly those who are new to Copilot for Security.

Aside from the specifics of interactions with GitHub Advanced Security (GhAS), I believe this content could be useful for a more complete understanding of Copilot's operational and integration capabilities.

The structure of the content is as follows:

• Preparation: Instructions on generating the necessary key for GitHub integration with Copilot. Read it here: Integration of GhAS in Copilot for Security - Preparation | LinkedIn
• Configuration: Steps to incorporate the two required plugins. Read it here: Integration of GhAS in Copilot for Security - Configuration | LinkedIn
• Skills Overview: A detailed look at the skills. Read it here: Integration of GhAS in Copilot for Security - Skills Overview | LinkedIn
• Example Session: A demonstration of a typical user session in Copilot, where the user asks for content that is also in GitHub Advanced Security. Read it here: Integration of GhAS in Copilot for Security - Example Session | LinkedIn
• Promptbook Creation: Guidelines on how to compile a simple promptbook that includes also some of these custom skills. Read it here: Integration of GhAS in Copilot for Security - Promptbook Creation | LinkedIn
• Logic App Creation: Detailed procedure on how to develop a Logic App that utilizes these skills to generate a daily summary email of the evidences retrieved in GitHub Advanced Security. Read it here: Integration of GhAS in Copilot for Security - Logic App Creation | LinkedIn

Please take a look to the Logic App. It gives an idea about how complex tasks of data retrieval (from API), field selection and formatting, thanks to the Large Language Model GPT4 included in Copilot for Security, can now be easily "programmed" in natural language without writing a single line of code!