Semgrep topics
12 short topics in Application Security and Secure Development. Each one is a single focused exercise with a clear piece of evidence at the end.
12 topics, one exercise each.
Work through them in order, or jump to the one you need.
These are draft topic outlines (draft; instructor review pending). Full lessons follow after review; ask Ajay if you need a topic sooner.
- 01
Source and dependency scope
Inspect evidence for source and dependency scope in Semgrep; explain the diagnosis and verify a proposed correction in a lab. Keep the exercise bounded and record the behavior supported by the chosen version.
Open micro-course → - 02
Rule or query selection
Inspect evidence for rule or query selection in Semgrep; explain the diagnosis and verify a proposed correction in a lab. Keep the exercise bounded and record the behavior supported by the chosen version.
Open micro-course → - 03
Language and build integration
Inspect evidence for language and build integration in Semgrep; explain the diagnosis and verify a proposed correction in a lab. Keep the exercise bounded and record the behavior supported by the chosen version.
Open micro-course → - 04
Trust and data-flow reasoning
Inspect evidence for trust and data-flow reasoning in Semgrep; explain the diagnosis and verify a proposed correction in a lab. Keep the exercise bounded and record the behavior supported by the chosen version.
Open micro-course → - 05
Finding evidence interpretation
Inspect evidence for finding evidence interpretation in Semgrep; explain the diagnosis and verify a proposed correction in a lab. Keep the exercise bounded and record the behavior supported by the chosen version.
Open micro-course → - 06
Severity and priority decisions
Inspect evidence for severity and priority decisions in Semgrep; explain the diagnosis and verify a proposed correction in a lab. Keep the exercise bounded and record the behavior supported by the chosen version.
Open micro-course → - 07
False-positive and suppression review
Inspect evidence for false-positive and suppression review in Semgrep; explain the diagnosis and verify a proposed correction in a lab. Keep the exercise bounded and record the behavior supported by the chosen version.
Open micro-course → - 08
Secret and dependency checks
Inspect evidence for secret and dependency checks in Semgrep; explain the diagnosis and verify a proposed correction in a lab. Keep the exercise bounded and record the behavior supported by the chosen version.
Open micro-course → - 09
CI policy integration
Inspect evidence for ci policy integration in Semgrep; explain the diagnosis and verify a proposed correction in a lab. Keep the exercise bounded and record the behavior supported by the chosen version.
Open micro-course → - 10
Finding ownership and remediation
Inspect evidence for finding ownership and remediation in Semgrep; explain the diagnosis and verify a proposed correction in a lab. Keep the exercise bounded and record the behavior supported by the chosen version.
Open micro-course → - 11
Baseline and change comparison
Inspect evidence for baseline and change comparison in Semgrep; explain the diagnosis and verify a proposed correction in a lab. Keep the exercise bounded and record the behavior supported by the chosen version.
Open micro-course → - 12
Remediation verification
Inspect evidence for remediation verification in Semgrep; explain the diagnosis and verify a proposed correction in a lab. Keep the exercise bounded and record the behavior supported by the chosen version.
Open micro-course →
Learn the same ideas beyond Semgrep.
These courses share topics with this one, so you can compare how each language or tool handles the same concept.
More in Security identity and secrets.
You have the curiosity.
Let’s turn it into capability.
Start with a practical workshop or bring a specific question to Ajay.