Static Code Analysis Courses and Certifications

LASCON

Choosing the Right Static Code Analyzers Based on Hard Data

Explore unbiased methods to assess static code analyzers' performance, learn about a new website presenting research results, and discover how to choose the right tools for your development pipeline.

• YouTube
• 34 minutes
• On-Demand
• Free Video

OWASP Foundation

Continuous Integration: Live Static Analysis Using Visual Studio and the Roslyn API

Explore live static analysis in Visual Studio using Roslyn API for secure coding. Learn to create custom rules, integrate secure code scanning, and enhance .NET application security.

• YouTube
• 54 minutes
• On-Demand
• Free Video

OWASP Foundation

Static Code Analysis of Complex PHP Application Vulnerabilities

Explore advanced static code analysis techniques for detecting complex PHP vulnerabilities, including first-order, second-order, and object injection issues.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Conf42

Secrets of the Source

Explore source code analysis techniques with industry experts, uncovering insights to enhance software quality and development practices.

• YouTube
• 19 minutes
• On-Demand
• Free Video

Foundations of Software Testing and Validation

Gain career-ready skills in software testing and development by designing robust test cases and applying industry standards.

• FutureLearn
• 2 weeks, 3 hours a week
• On-Demand
• Free Certificate

DevSecOps: Building a Secure Continuous Delivery Pipeline

278 ratings at LinkedIn Learning

Explore best practices and tools that can help you implement security across the entirety of the continuous integration and continuous delivery (CI/CD) pipeline.

• LinkedIn Learning
• 1 hour 12 minutes
• On-Demand
• Free Trial Available

Using Security Analysis Tools to Protect ASP.NET and ASP.NET Core Applications

19 ratings at Pluralsight

Improve the security of your ASP.NET (Core or Framework) web applications by scanning both the code you write and the packages you use in those applications. Even better, include those scans in automated build pipelines!

• Pluralsight
• 1 hour 21 minutes
• On-Demand
• Free Trial Available

Maintaining Code Quality with TeamCity

11 ratings at Pluralsight

This course will teach you how to enforce high quality maintainable application code across your team by using TeamCity to automate unit test execution and running static code analysis.

• Pluralsight
• 1 hour 33 minutes
• On-Demand
• Free Trial Available

DevOps with GitHub and Azure: Implementing Software Supply Chain Security with GitHub

Implementing Software Supply Chain Security can be challenging. In this course, you will learn how to improve code security with GitHub.

• Pluralsight
• 56 minutes
• On-Demand
• Free Trial Available

Learn to integrate security into DevOps, covering vulnerabilities, tools for code analysis, and best practices. Gain skills to implement secure software development throughout the entire pipeline, from planning to deployment and monitoring.

• Cybrary
• 4-5 hours
• On-Demand
• Paid Course

Snyk

Using the Snyk CLI for Static Code Analysis

Learn to use Snyk CLI for static code analysis in CI/CD pipelines. Covers installation, testing, result filtering, and practical scenarios for integrating security scans into your development workflow.

• YouTube
• 1 hour 4 minutes
• On-Demand
• Free Video

IEEE

Short Text, Large Effect - Measuring the Impact of User Reviews on Android App Security & Privacy

Exploring the impact of user reviews on Android app security and privacy, analyzing 4.5M reviews to identify concerns and measure developers' responses through code changes.

• YouTube
• 17 minutes
• On-Demand
• Free Video

OWASP Foundation

Choosing the Right Static Code Analyzers Based on Hard Data

Learn to select effective static code analyzers using data-driven insights, exploring tool capabilities, integration, coverage, and result quality for improved software security.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

NDC Conferences

Strangling the Monolith - Applied Patterns & Practices from the Trenches

Practical strategies for incrementally modernizing legacy systems, focusing on the strangler pattern, domain-driven design, and team topologies to evolve towards a reactive architecture.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

IEEE

Talos - Neutralizing Vulnerabilities with Security Workarounds for Rapid Response

Neutralizing vulnerabilities using error-handling code for rapid response, minimizing patch delays while maintaining functionality. Explores automated security workarounds to mitigate risks in popular Linux server applications.

• YouTube
• 20 minutes
• On-Demand
• Free Video