From the course: GitHub Advanced Security Cert Prep by Microsoft Press

Unlock this course with a free trial

Join today to access over 24,700 courses taught by industry experts.

Follow the data flow through code using the show paths experience

Follow the data flow through code using the show paths experience - GitHub Tutorial

From the course: GitHub Advanced Security Cert Prep by Microsoft Press

Start my 1-month free trial Buy for my team

Follow the data flow through code using the show paths experience

“

- [Tutor] Right, well, we recall that the CodeQL engine takes your project folder and actually will run the application, build it, compile it, if it is compiled, and run it to visualize the execution paths. And then, as we've stated several times in the past few lessons, we interact using the QL query language to ask questions of the data in a database paradigm, hopefully, leading to vulnerability detection and remediation, that's the big picture. So we're looking as we make these queries of our CodeQL database for data flows and code flows that may represent vulnerabilities, and therefore, we can alert on them and we can find, as this slide says, the root cause of the vulnerability, rather than just putting a proverbial bandaid over it, if you've heard that expression before. Next case study, Baldwin Museum. Baldwin Museum uses show paths feature and CodeQL to trace sensitive data flow. The solution prioritizes the remediation of vulnerabilities at the root. You're probably curious…

Contents