Free
Static Code Analysis
In this hands-on lab, you will learn the basics of Static Code Analysis. You will practice running static code analyses using SonarQube, a fully-featured and open-source static analysis engine, as well as interpreting its results and determining remediation steps for the security issues it identifies.
1
H
30
M
Time
Intermediate
difficulty
1
ceu/cpe
Course Content
No items found.
No items found.
Course Description
Upon completing this lab, you should be able to:
- Define "static code analysis" and describe its importance.
- Identify common static analysis tools and their features.
- Use static code analysis tools to scan code for vulnerabilities.
- Interpret the results of a static code analysis report.
- Identify steps to remediate identified security issues in the source code.
