What is GitHub Code Scanning? Find VULNERABILITIES in your code

What is GitHub Code Scanning? How to find vulnerabilities in GitHub's hosted code?
This is what we are talking about today! In this GitHub Code Scanning first look we will take a look at how to enable GitHub Code Scanning, and how to use it to find vulnerabilities in your code.
🌟EXCLUSIVE CONTENT🌟
Do you want to access exclusive content, live chats and Q&As, polls, and even 1:1 calls with me? Join my Patreon: / coderdave
🆘 NEED HELP? 🆘
Book a 1:1 Consultation with CoderDave: geni.us/cdconsult
🙏🏻SUPPORT THE CHANNEL🙏🏻
Buy me a coffee: www.buymeacoffee.com/CoderDave
PayPal me donation: paypal.me/dabenveg
💬JOIN THE COMMUNITY
► Website: coderdave.io
► Discord: geni.us/cddiscord
► Newsletter: coderdave.io/newsletter
► Blog: dev.to/n3wt0n
► GitHub: github.com/n3wt0n
► Twitter: / davidebenvegnu
► Facebook: / coderdaveyt
🎥VIDEOS
► Use GitHub like a PRO: • Use GitHub like a PRO!...
► Automate everything with GitHub Actions: • Automate EVERYTHING wi...
► How to use GitHub Actions for .Net Framework: • How to use GitHub Acti...
⏲TIMESTAMPS
0:00 Intro
1:06 What is Code Scanning?
1:27 How to enable Code Scanning
3:03 Code Scanning in action
3:34 Vulnerability analysis results
4:33 Wrap up
4:59 Bloopers
🎤PODCAST: geni.us/cdpodcast
❓QUESTIONS?
Have a question about DevOps, Cloud, Coding, or Anything Else? Post in comments section of this video!
🔴SUBSCRIBE to CoderDave here: ruclips.net/user/CoderDave?sub...
_______________
👕GET MY MERCH: geni.us/cdmerch
🔮TOOLS I USE
► Twingate - Connect to your Private Resources SECURELY: geni.us/twingate
► TubeBuddy - #1 RUclips channel Management tool (FREE): www.tubebuddy.com/CoderDave
► Moosend - Free Newsletter and Automation Platform: geni.us/moosend
📸🖥️GEAR AND SOFTWARE
► Music - Epidemic Sound (Get 30 days free): epidemicsound.com/referral/zf...
► Editing - Adobe Premiere Pro: geni.us/AdobeVideo
► Gear I Use for RUclips: kit.co/CoderDave/gear-i-use-f...
► Gear I Use for Streaming: kit.co/CoderDave/gear-i-use-f...
► My Computer Setup: kit.co/CoderDave/main-compute...
► Full office setup: github.com/n3wt0n/work-from-h...
Disclaimer:
Some product links are affiliate links which means if you buy something I'll receive a small commission at no additional cost to you.
As an Amazon Associate, I earn from qualifying purchases.

[@CoderDave]

✨ *Question of the day* ✨: What do you use for scanning your code for security and vulnerability issues?

[@hackwithharsha5228]

As of now, nothing :)

[@CoderDave]

Well, there’s always a first time for everything 😉

[@hackwithharsha5228]

@@CoderDave Agree !!

[@divinechunk182]

H

[@ReligionAndMaterialismDebunked]

:3 Great for ethical hacking.

[@hackwithharsha5228]

Please do more of these 3 minutes videos, Thank you !!

[@CoderDave]

Happy to know it’s helpful! Btw I have these shirt 3 (ish) minutes video every Friday

[@phuocnguyenngoc3782]

Thank you. It is very useful.

[@CoderDave]

Glad to hear that

[@goodtimes8345]

Thank you for the insightful video. Dave did you made the longer video for CodeQL? if yes can you provide the link please

[@CoderDave]

Thanks, no I don't have a longer video unfortunately. But I did cover some of it on a live stream I've done together with OWASP and their DevSlop team. Here is the link: ruclips.net/video/aLZGuL769Xs/видео.html

[@goodtimes8345]

@@CoderDave Thankyou I have watched that 🙏

[@mayankpatel9379]

For php code any scanner is there ??

[@Money11119]

Thank you sir

[@CoderDave]

Welcome ☺️

[@sushantsahay4576]

How we can download the vulnerabilities as a report from github?? Please help

[@srihari809]

Any playlist on this GitHub code scanning?
Or any complete tutorial on GitHub advanced security?
Please help on the same

[@CoderDave]

I don't have it yet, but I do have some content planned around it :) stay tuned ;)

[@BharatKumar-bn2ck]

can you do 3mins videos on basic scan and reviving results and prereqisite skills for undersatnding code scanning

[@CoderDave]

I think that would be much longer than 3 minutes :D butI can try

[@altayhunoglu1709]

Very clean explanation. Thanks.

[@CoderDave]

Glad it was helpful!

[@chackokabraham738]

Hey Dave, I heard Github Code Scanning is having their CLI version(CodeQL CLI) , not sure if you already made a video on that.

[@CoderDave]

Hey Chacko. Yes, the CodeQL CLI is there but I haven't used it much just yet. It is something I was planning to make a video about it at some point, but I want to use it more first. I like to make videos only about topics I know what I;m talking about with enough confidence :D
Thanks for the suggestion tho, it is something I will definitely do.

[@chackokabraham738]

@@CoderDave Yep, i do always see that confidence thats why i watch them :)

[@CoderDave]

Thanks ☺️

[@nagarjunarajureddicherla573]

Can you please upload full length video on GitHub Advanced Security..

[@CoderDave]

Working on it 😉

[@ramakrishnans6721]

can you ps show a video on how to configure Azure VM scale set for Github self hosted runner

[@CoderDave]

I will, thanks for the suggestion. Stay tuned ;)

[@NithidayaSJ]

Please do full video

[@CoderDave]

I have a few videos in which I talk about GitHub Code Scanning in depth and how I use it

[@HenryPan]

Cool

[@CoderDave]

Thanks

[@ReligionAndMaterialismDebunked]

Great for ethical hacking.

[@CoderDave]

I guess you can use it for that 😁