Secure Your Code and Dependencies
Compare Semgrep, CodeQL, Snyk and more, then build live: scan a repo, generate an SBOM, sign an image.
Not scheduled yet — no date, time or fee fixed. The most-voted topic is hosted next.
1:1 or squad batch · join the community or channel
Learn this topic with a mentor
Don't want to wait for the webinar? Pick how you'd like help. Nothing is paid now — you see the fee before anything is booked.
- Bring your own work — code, campaign, report or plan
- Mentor matched to this topic
- Time, format and fee confirmed by email first
What this session would cover
Proposed outline — the mentor finalises the agenda once this topic is scheduled.
- 1The real problem: vulnerable packages shipped unknowingly
- 2The tool landscape: Semgrep, CodeQL, Snyk, Trivy, Grype, Syft, Gitleaks, TruffleHog, Dependency-Check, Cosign — what each is for and where they overlap
- 3How to choose: team size, integrations, where your data lives, and today's pricing and availability (checked live, not from memory)
- 4Live practical task: Scan a repo, generate an SBOM, sign an image
- 5Build the reusable output together: Supply-chain security checklist
- 6When you don't need a new tool at all, then live Q&A on your own setup
Who it's for
- • Students and developers who want hands-on practice with real tools
You'd leave with
- Supply-chain security checklist
- A shortlist of 2–3 options from Semgrep, CodeQL, Snyk, Trivy and others, with the criteria to pick one
- Hands-on practice: scan a repo, generate an SBOM, sign an image
More topics in IT Tools: Cybersecurity & Identity Management
Add Secure Login Without Building It Yourself
Compare Entra ID, Okta, Auth0 and more, then build live: add SSO login with Keycloak or Clerk.
0 votes · View topic →
Stop Leaking Passwords and API Keys
Compare Bitwarden, 1Password, KeePassXC and more, then build live: move secrets to a manager and rotate one.
0 votes · View topic →
Ethical Vulnerability Scanning (Authorised Systems Only)
Compare Burp Suite, ZAP, Nessus and more, then build live: scan an intentionally vulnerable lab app with ZAP.
0 votes · View topic →
Detect Attacks: SIEM and Endpoint Security Basics
Compare Sentinel, Defender for Endpoint, Wazuh and more, then build live: set up Wazuh and trigger one alert.
0 votes · View topic →
Secure Remote Access: VPN and Zero Trust
Compare WireGuard, OpenVPN, Tailscale and more, then build live: connect a team to a private app with Tailscale / Zero Trust.
0 votes · View topic →