Skip to content

Enable code scanning and secure your code with CodeQL.

License

Notifications You must be signed in to change notification settings

skills/introduction-to-codeql

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

33 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Enable CodeQL to secure your source code

Ensuring the security of application source code is a critical step in modern software development. In this GitHub Skills course, you will learn to use GitHub code scanning to identify, resolve, and prevent insecure coding patterns.

Welcome

Welcome to "Introduction to CodeQL"! 👋

In this course, we will explore using GitHub code scanning, powered by CodeQL, to identify common coding practices that can lead to security vulnerabilities. During this course, we will enable code scanning on your repository to identify, remediate, and prevent vulnerabilities.

Code scanning is part of the GitHub Advanced Security (GHAS) product suite. All of the features of Advanced Security are 100% free for open source, public repositories.

  • Who is this for: Developers, security engineers, open source maintainers.
  • What you'll learn: We'll show you how to enable code scanning and identify SQL injection vulnerabilities with CodeQL.
  • What you'll build: A secure software development pipeline that allows you to identify and prevent new security vulnerabilities from being introduced into your production code.
  • Prerequisites: In this course, you'll need a baseline knowledge of GitHub concepts such as pull requests, GitHub Actions, and source code. You'll also need to be familiar with the concepts of Static Application Security Testing (SAST). Don't worry, we'll demistify the complex parts for you 🙂.
  • How long: This course is four steps long and takes less than 30 minutes to complete.

How to start this course

start-course

  1. Right-click Start course and open the link in a new tab.
  2. In the new tab, most of the prompts will automatically fill in for you.
    • For owner, choose your personal account or an organization to host the repository.
    • We recommend creating a public repository, as private repositories will use Actions minutes.
    • Scroll down and click the Create repository button at the bottom of the form.
  3. After your new repository is created, wait about 20 seconds, then refresh the page. Follow the step-by-step instructions in the new repository's README.

Get help: Post in our discussion boardReview the GitHub status page

© 2023 GitHub • Code of ConductMIT License

About

Enable code scanning and secure your code with CodeQL.

Topics

Resources

License

Code of conduct

Security policy

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published