GitHub: DevSecOps: Part 5/12: Protect your Apps with Static Application Security Testing (SAST)

Опубликовано: 14 Октябрь 2024
на канале: Romano Roth

1,721

How to do Static Application Security Testing (SAST) 🛡️ in GitHub and to succeed with this critical security configuration.
Part 5/12: In this video, Padi and I will show you how to find vulnerabilities in your code using Static Application Security Testing (SAST) in GitHub.

▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬
00:00 Welcome
00:27 Intro
00:33 DevSecOps with GitHub
01:05 About SAST
03:15 How to Implement SAST with GitHub
05:16 Add SAST to Main-Pipeline.yml
06:10 Create sast.yml
07:40 SAST with CodeQL
09:54 SAST with SpotBugs
10:49 SAST with Semgrep
12:23 Pipeline results
13:27 CodeQL findings
14:17 Semgrep findings
15:16 What didn't we find with these tools?
16:47 Summary

▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬
Source Code
https://github.com/romanoroth/GitHubD...
Blog-Post
https://www.romanoroth.com/post/gitla...
GitHub
https://github.com/
Patrick Steger
  / patrick-steger-ch
Static Application Security Testing (SAST) in GitHub
https://github.com/features/security/...

▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬
GitHub: DevSecOps: Part 1/12: What is GitHub? The fundamental concepts of a DevSecOps pipeline.
   • GitHub: DevSecOps: Part 1/12: What is...
GitHub: DevSecOps: Part 2/12: Introduction to GitHub
   • GitHub: DevSecOps: Part 2/12: Introdu...
GitHub: DevSecOps: Part 3/12: Learn How to Use SCA (Software Composition Analysis)
   • GitHub: DevSecOps: Part 3/12: Learn H...
GitHub: DevSecOps: Part 4/12: How to ensure License Compliance?
   • GitHub: DevSecOps: Part 4/12: How to ...
GitHub: DevSecOps: Part 5/12: Protect your Apps with Static Application Security Testing (SAST)
   • GitHub: DevSecOps: Part 5/12: Protect...

▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬
╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗
║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣
╠╗║╚╝║║╠╗║╚╣║║║║║═╣
╚═╩══╩═╩═╩═╩╝╚╩═╩═╝
   / @romanoroth

▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬
LINKEDIN ►   / romanoroth
TWITTER ►   / romanoroth
INSTAGRAM ►   / romanoroth
FACEBOOK ►  / romanoroth
MEETUP ► https://www.meetup.com/de-DE/DevOps-M...
CONFERNCE ►https://www.devopsdays.ch/
HOMEPAGE ► https://www.romanoroth.com/

▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬
Modern Software Engineering
   • Modern Software Engineering
DevOps
   • DevOps
GitLab: Build a DevSecOps Pipeline
   • GitLab: Build a DevSecOps Pipeline

#devsecops #devops #github #romanoroth