filmov
tv
Scan a GitHub Repository from Azure DevOps Pipeline using Advanced Security
Показать описание
GitHub Advanced Security now supports the ability to analyze your code for vulnerabilities from third-party CI pipelines, including the Azure Pipelines GitHub Integration
Let's see how we can scan a GitHub repository from Azure DevOps Pipeline using Advanced Security, thanks to GitHub Code Scanning
🆘 NEED HELP? 🆘
We can talk about GitHub, Azure DevOps, or any other DevOps tool or project you need help with!
🙏🏻SUPPORT THE CHANNEL🙏🏻
💬JOIN THE COMMUNITY
🎥VIDEOS
⏲TIMESTAMPS
0:00 Intro
1:00 Overview
1:27 The needed steps
2:30 Install CodeQL in Azure Pipelines
2:52 Authorize CodeQL
4:14 Initialize CodeQL
5:06 Analyze your repo and upload the results
6:00 CodeQL in action
7:24 About compiled languages scanning
7:48 Wrap up
8:05 Bloopers
❓QUESTIONS?
Have a question about DevOps, Cloud, Coding, or Anything Else? Post in comments section of this video!
_______________
🔮TOOLS I USE
📸🖥️GEAR AND SOFTWARE
Disclaimer:
Some product links are affiliate links which means if you buy something I'll receive a small commission at no additional cost to you.
As an Amazon Associate, I earn from qualifying purchases.
Let's see how we can scan a GitHub repository from Azure DevOps Pipeline using Advanced Security, thanks to GitHub Code Scanning
🆘 NEED HELP? 🆘
We can talk about GitHub, Azure DevOps, or any other DevOps tool or project you need help with!
🙏🏻SUPPORT THE CHANNEL🙏🏻
💬JOIN THE COMMUNITY
🎥VIDEOS
⏲TIMESTAMPS
0:00 Intro
1:00 Overview
1:27 The needed steps
2:30 Install CodeQL in Azure Pipelines
2:52 Authorize CodeQL
4:14 Initialize CodeQL
5:06 Analyze your repo and upload the results
6:00 CodeQL in action
7:24 About compiled languages scanning
7:48 Wrap up
8:05 Bloopers
❓QUESTIONS?
Have a question about DevOps, Cloud, Coding, or Anything Else? Post in comments section of this video!
_______________
🔮TOOLS I USE
📸🖥️GEAR AND SOFTWARE
Disclaimer:
Some product links are affiliate links which means if you buy something I'll receive a small commission at no additional cost to you.
As an Amazon Associate, I earn from qualifying purchases.
0:03:34
Intro to GitHub Code Scanning
0:08:30
Scan a GitHub Repository from Azure DevOps Pipeline using Advanced Security
0:05:21
What is GitHub Code Scanning? Find VULNERABILITIES in your code
0:00:59
Learning about secret scanning on GitHub
0:01:22
Scan a Github Project using SolidityScan
0:01:28
How to Code/Download from GitHub in Under 1 Minute!
0:24:47
Webinar: GitHub Secret Scanning and Push Protection (with Xpirit and GitHub)
0:01:24
Overview of GitHub Secret Scanning
1:31:51
Workshop - Robustly Scaling Playwright Tests | Andrew Knight | Testμ 2024 | LambdaTest
0:33:11
GitHub Code Scanning: A DevSecOps Approach to Security as Code
0:34:06
Efficient GitHub Code Scanning with SonarCloud and GitHub Actions | SonarQube | GitHub | Code Scan
0:15:11
Read Any Github Repo with LangChain + OpenAI
0:06:40
open sourcing my github actions security scanner
0:12:13
Perform Security Code Analysis in GitHub with CodeQL and GitHub actions
0:00:46
Setup Code scanning in GitHub
0:11:31
Security Scanning in your CI/CD pipeline through GitHub Actions with Trivy
0:00:47
Transform your code security with GitHub's code scanning autofix
0:06:03
User defined patterns for secret scanning - GitHub Checkout
0:04:23
Adding SAST into GitHub workflows using Fortify
0:03:01
Snyk integration with Github and first scan
0:04:58
Scanning code with Semgrep using GitHub Actions
0:18:16
Taking a Look at GitHub Advanced Security
0:05:15
Configuring GitHub Actions to Launch a Scan in Fortify on Demand
0:00:18
Code Review Doctor scanning openai Python GitHub repository auto-detecting bugs and suggesting fixes
Комментарии