Case Study: SPH Media achieves secure, streamlined DevSecOps with GitHub

SPH Media tames tool sprawl and secures code with GitHub

SPH Media, Singapore’s leading media company behind The Straits Times and other major brands, was shifting to a digital-first model and struggling with tool sprawl across its engineering teams. Before adopting GitHub, source code was scattered across multiple platforms, making it difficult to standardize processes, gain visibility into security risks, and avoid duplicated work.

SPH Media centralized its DevSecOps on GitHub, using GitHub Advanced Security, GitHub Actions, Repository Rules, and GitHub Copilot for Business. The move helped the company detect thousands of exposed secrets, improve security oversight, automate workflows, and reduce manual configuration, while also boosting developer productivity and collaboration. GitHub enabled SPH Media to operate more efficiently at scale and keep security, automation, and code management in one place.

SPH Media

Yong Wen Chua

Head of Platform Engineering