Static Code Analysis
In this hands-on lab, you will learn the basics of Static Code Analysis. You will practice running static code analyses using SonarQube, a fully-featured and open-source static analysis engine, as well as interpreting its results and determining remediation steps for the security issues it identifies.

Course Content
Upon completing this lab, you should be able to:
- Define "static code analysis" and describe its importance.
- Identify common static analysis tools and their features.
- Use static code analysis tools to scan code for vulnerabilities.
- Interpret the results of a static code analysis report.
- Identify steps to remediate identified security issues in the source code.