Static Code Analysis Courses and Certifications

OWASP Foundation

Continuous Integration: Live Static Analysis Using Visual Studio and the Roslyn API

Explore live static analysis in Visual Studio using Roslyn API for secure coding. Learn to create custom rules, integrate secure code scanning, and enhance .NET application security.

• YouTube
• 54 minutes
• On-Demand
• Free Online Course

OWASP Foundation

Static Code Analysis of Complex PHP Application Vulnerabilities

Explore advanced static code analysis techniques for detecting complex PHP vulnerabilities, including first-order, second-order, and object injection issues.

• YouTube
• 40 minutes
• On-Demand
• Free Online Course

LASCON

Choosing the Right Static Code Analyzers Based on Hard Data

Explore unbiased methods to assess static code analyzers' performance, learn about a new website presenting research results, and discover how to choose the right tools for your development pipeline.

• YouTube
• 34 minutes
• On-Demand
• Free Online Course

Foundations of Software Testing and Validation

Gain career-ready skills in software testing and development by designing robust test cases and applying industry standards.

• FutureLearn
• 2 weeks, 3 hours a week
• On-Demand
• Paid Course

DevSecOps: Building a Secure Continuous Delivery Pipeline

278 ratings at LinkedIn Learning

Explore best practices and tools that can help you implement security across the entirety of the continuous integration and continuous delivery (CI/CD) pipeline.

• LinkedIn Learning
• 1 hour 12 minutes
• On-Demand
• Free Trial Available

Using Security Analysis Tools to Protect ASP.NET and ASP.NET Core Applications

19 ratings at Pluralsight

Improve the security of your ASP.NET (Core or Framework) web applications by scanning both the code you write and the packages you use in those applications. Even better, include those scans in automated build pipelines!

• Pluralsight
• 1 hour 21 minutes
• On-Demand
• Free Trial Available

Maintaining Code Quality with TeamCity

11 ratings at Pluralsight

This course will teach you how to enforce high quality maintainable application code across your team by using TeamCity to automate unit test execution and running static code analysis.

• Pluralsight
• 1 hour 33 minutes
• On-Demand
• Free Trial Available

Learn to integrate security into DevOps, covering vulnerabilities, tools for code analysis, and best practices. Gain skills to implement secure software development throughout the entire pipeline, from planning to deployment and monitoring.

• Cybrary
• 4-5 hours
• On-Demand
• Paid Course

Tech with Tim

Python Typing - Type Hints & Annotations

Learn Python type hints and annotations for clearer, more maintainable code. Covers various types, static analysis, and advanced concepts like generics to enhance your programming skills.

• YouTube
• 25 minutes
• On-Demand
• Free Online Course

Snyk

Using the Snyk CLI for Static Code Analysis

Learn to use Snyk CLI for static code analysis in CI/CD pipelines. Covers installation, testing, result filtering, and practical scenarios for integrating security scans into your development workflow.

• YouTube
• 1 hour 4 minutes
• On-Demand
• Free Online Course

IEEE

Talos - Neutralizing Vulnerabilities with Security Workarounds for Rapid Response

Neutralizing vulnerabilities using error-handling code for rapid response, minimizing patch delays while maintaining functionality. Explores automated security workarounds to mitigate risks in popular Linux server applications.

• YouTube
• 20 minutes
• On-Demand
• Free Online Course

Hack In The Box Security Conference

Hacking the DevOps Butler - From Nothing to Admin

Explore Jenkins vulnerabilities and exploitation techniques, focusing on two critical flaws that allow unauthenticated attackers to gain admin access and control entire infrastructures.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

HackerOne

Hacker-Powered Security in Agile Software Development - Webinar

Explore hacker-powered security in agile software development, covering open source risks, bug bounty benefits, and integrating security into continuous delivery workflows.

• YouTube
• 1 hour
• On-Demand
• Free Online Course

Bugcrowd

What's in My Hacking Tool Box? by Richard Rushing

Explore a seasoned hacker's toolkit and methodology for penetration testing, covering various domains including malware analysis, mobile app exploitation, and API security.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Free Online Course

NDC Conferences

Strangling the Monolith - Applied Patterns & Practices from the Trenches

Practical strategies for incrementally modernizing legacy systems, focusing on the strangler pattern, domain-driven design, and team topologies to evolve towards a reactive architecture.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk