Attending this event?
Back To Schedule
Saturday, June 17 • 9:30am - 10:05am
Effective SAST: Secure Code Analysis in the CI/CD

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

In this talk we will provide an in-depth look at using semgrep, an open-source tool for static code analysis, to improve the security of your application. The talk will cover how to run it on your codebase, how to interpret the results, and how to create custom rules for semgrep, so you can tailor the tool to your specific needs and reduce false positives making the whole SAST process meaningful. Additionally, we will talk about how to integrate semgrep your CI/CD pipeline, which will automate the process of running semgrep on your codebase and make it easier to catch security vulnerabilities early in the development process. The talk is aimed at developers of all experience levels. Attendees will leave with a good understanding of how to use semgrep to improve the security of their applications.


Saturday June 17, 2023 9:30am - 10:05am CEST
E104 | Talks
Feedback form isn't open yet.