SAST with Semgrep: reading, fixing and writing rules

1 h Python 3.12 (Debian, git, pip)

Objective

Use a static analysis tool (SAST, Static Application Security Testing) to find flaws in the source code before it is shipped: install Semgrep, run rule sets, understand a result, fix the cause, handle false positives properly, write your own rules and have CI enforce them.

This lesson is part of the full course

Unlock DevSecOps: Securing Code, Dependencies and Containers to read every lesson, do the exercises, access the simulations and earn your certificate.

Buy — 290 MAD All-access pass — 1,490 MAD

Already enrolled? Log in.