Finding security vulnerabilities in JavaScript with Github's CodeQL & Code Scanning

Identifying code vulnerability is always a growing concern for a software engineer. How to reduce the security vulnerabilities in a growing code base? To mitigate such problems, I started exploring and got introduced to Github’s CodeQL.

Read this document by Github to learn more about application security. It covers various aspects like:

• State of application security today.


• Traditional vs. end-to-end security.


• Developer first application security
  with GitHub.

Through this blog, I will give a step-by-step understanding on how to find …

code codeql code scanning github javascript sast scanning security vulnerabilities