CodeQL Courses and Certifications

Bugcrowd

CodeQL Roundtable: Leveraging Static Analysis for Bug Bounties

Explore CodeQL's power in bug bounty hunting and open-source security. Learn from @JLLeitschuh's experiences, vulnerability discoveries, and future plans for enhancing software security.

• YouTube
• 28 minutes
• On-Demand
• Free Video

GitHub Advanced Security Part 1 of 2

Comprehensive security training covering GitHub Advanced Security features, including Dependabot, secret scanning, code scanning, and CodeQL. Focuses on implementation, configuration, and best practices for secure development.

• Microsoft Learn
• 2 hours 3 minutes
• On-Demand
• Free Online Course

GitHub Advanced Security Part 2 of 2

Master CodeQL for security vulnerability detection, customize code scanning workflows, manage GitHub Advanced Security features, and implement secure development practices to protect your repositories.

• Microsoft Learn
• 3 hours 51 minutes
• On-Demand
• Free Online Course

Scaling the Security Researcher to Eliminate OSS Vulnerabilities - Automated Solutions

Innovative approach to automate detection, reporting, and fixing of common security vulnerabilities in open-source software at scale, using tools like CodeQL and OpenRewrite for efficient vulnerability management.

• YouTube
• 52 minutes
• On-Demand
• Free Video

HackerOne

Discover Vulnerabilities with CodeQL

Explore CodeQL's static and taint analysis capabilities to uncover vulnerabilities, including potential RCE flaws. Learn key concepts for effective code analysis and security testing.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

Black Hat

CodeQL - Also a Powerful Binary Analysis Engine

Unveiling CodeQL's potential as a binary static analysis tool, exploring its engine capabilities and applications beyond traditional static analysis for enhanced software security.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Recon Conference

Path of Rev.ng: From Raw Bytes to CodeQL on Decompiled Code

Explore the rev.ng decompiler's capabilities in this hands-on guide from raw binary to decompiled C code, including using LLVM IR, CodeQL, and clang-static-analyzer to find bugs in decompiled code.

• YouTube
• 56 minutes
• On-Demand
• Free Video

Conf42

GitHub Dependabot, CodeQL, and Other Built-in Security Features

Explore GitHub's built-in security features including Dependabot, CodeQL, and secret scanning through live demos and DevSecOps best practices.

• YouTube
• 35 minutes
• On-Demand
• Free Video

GH-500: GitHub Advanced Security (Live Online)

8 ratings at CourseHorse

Strengthen your software development security practices with a deep dive into GitHub's most powerful tools.

• CourseHorse
• 6 hours
• On-Demand
• $495.00

GitHub Advanced Security (GHAS)

74 ratings at LinkedIn Learning

Learn about GitHub's security features, including dependency scanning using Dependabot, secret scanning, and code scanning.

• LinkedIn Learning
• 1 hour 20 minutes
• On-Demand
• Free Trial Available

GitHub Advanced Security Certification - Exam Preparation Guide

Comprehensive guide to GitHub Advanced Security: vulnerability detection, workflow security, and implementation. Prepare for certification and enhance software integrity skills.

• freeCodeCamp
• 2 hours 36 minutes
• On-Demand
• Free Video

NDC Conferences

Security as Code - A DevSecOps Approach

Explore Security as Code methodology, integrating security into CI/CD pipelines for continuous vulnerability detection. Learn to implement CodeQL queries for early identification of security issues.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

NDC Conferences

Protect Your Code with GitHub Security Features

Learn to secure your software using GitHub's features, including signed commits, dependency scanning, secret scanning, and CodeQL, to protect against various attack vectors in modern development.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

PyCon US

Securing Code with the Python Type System

Explore how Python's type system can enhance code security, from simple annotations to advanced tools, preventing vulnerabilities and enabling incremental improvements in project safety.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

GOTO Conferences

GitHub Advanced Security: Securing the World's Software - Lecture

Explore GitHub Advanced Security's approach to empowering developers in securing software through code scanning, secret scanning, and supply chain security, with insights on AI integration.

• YouTube
• 55 minutes
• On-Demand
• Free Video