An intro to improving the security of your code with free analysis tools
summary
Overview of free tooling for reducing code attack surface with concrete demos and outcomes: shows Flawfinder flagging a C buffer overflow and spotting the vulnerable OpenSSL memcopy, Bandit using an AST to find Python insecure patterns, SonarCloud and Coverity running compiled analysis to surface a SHA‑1 password hash and other defects, and GitHub CodeQL compiling repositories and running queries via a query language. Also covers dependency scanners (OWASP Dependency‑Check, dependency‑track, GitHub Dependabot) that produce vulnerability reports and automatic remediation PRs, and integrating these into CI before pull requests.
AI-written summary · about
chapters (12)
- 0:00Start
- 6:18Increasing Consequences of Security
- 21:04Flawfinder demo
- 23:10Python bandit demo
- 25:28Codacy Demo
- 27:23Sonar Cloud
- 28:12Using SonarCloud build tool
- 28:43SonarCloud Demo
- 32:08Coverity Scan Demo
- 36:51Using OWASP Dependency Check
- 37:38Using OWASP Dependency Track
- 39:44GerritHub.io PR Review
related talks
38mFinding Security Issues in Open Source
01h 03m“Secure Coding Best Practices: Your First Line Is The Last Line Of Defense (2 of 2)”
52mSecurity as Code: A DevSecOps Approach
39m5 Open Source Security Tools All Developers Should Know About
42mSecure or Insecure Code, That Is the Question
34mKeep your code safe during the development path using OS tools
45mFinding Vulnerabilities through Static Analysis and Scripting
38mFortifying Your Codebase with GitHub