ingridpuppet/skills-introduction-to-codeql

GitHub Skills: Introduction to CodeQL

Enable CodeQL to secure your source code

Ensuring the security of application source code is a critical step in modern software development. In this GitHub Skills course, you will learn to use GitHub code scanning to identify, resolve, and prevent insecure coding patterns.

Finish

Congratulations! You have completed this course! 🏆

Here's a recap of all the tasks you accomplished in your repository:

• Enabled CodeQL on your repository.
• CodeQL scanned the code in your repository and notified us of two SQL injection vulenrabilities.
• Reviewed the findings, marked the findings as closed, and explored the audit trail.
• Fixed your code in the main branch and saw that the findings automatically closed out.
• Introduced a new vulnerability in a new branch.
• Created a pull request, and were notified of the vulnerability.

What's next?

• Continue your learning! Our code scanning documentation is a great resource for learning more about CodeQL.
• Learn more about CodeQL. Take a look at the CodeQL documenation site to learn about all of the features of this powerful tool.
• We'd love to hear what you thought of this course.
• Take another Skills course..
• Read the GitHub Getting Started docs.
• To find projects to contribute to, check out GitHub Explore.

---

Get help: Post in our discussion board • Review the GitHub status page

© 2023 GitHub • Code of Conduct • MIT License

skills-introduction-to-codeql's Issues

Fix code scanning alert - SQL query built from user-controlled sources

Tracking issue for:

• https://github.com/IngridPuppet/skills-introduction-to-codeql/security/code-scanning/2