LGTM retweeted
ICYMI: We're running a CTF until December 31st. Write a CodeQL query to find a specific class of DOM-based XSS vulns. The 2 best submissions will win Nintendo Switches, and 10 additional entries will receive coupons that can be used for GitHub Swag.
securitylab.github.com/ctf/j…
LGTM retweeted
Learn how our security researcher @nicowaisman found wireless vulnerabilities in the Linux Kernel, and variants, thanks to CodeQL: securitylab.github.com/resea…
LGTM retweeted
Want to challenge your vulnerability hunting skills? Try our latest Capture The Flag and discover XSS-unsafe jQuery plugins: securitylab.github.com/ctf/j…
LGTM retweeted
Check out the GitHub Security Lab bounty program! securitylab.github.com/bount…. Write a query, find bugs, get rewarded.
LGTM retweeted
See how you can use a known vulnerability to find entire classes of that bug in your code base. Check out this blog post: hubs.ly/H0kVRzV0
LGTM retweeted
Ever wish you had an extra team member to review each pull request with laser focus on security?
Join a live discussion and demo with Semmle's @oegerikus (CEO and founder) and @fjserna (CSO) on community-powered secure development.
github.co/2O9JmyL
LGTM retweeted
4/7 LGTM.com remains available and free for open source. Try it on your own projects, and let us know how it works for you!
LGTM retweeted
Today we welcome @Semmle to the GitHub family!
We’re excited to bring the world’s most powerful semantic code engine to the world’s largest developer community🔥
github.co/305z9tC
LGTM retweeted
Big news! Semmle is joining the @Github team to bring community-powered security analysis to millions of developers. Learn more from Semmle CEO @oegerikus here: hubs.ly/H0kQZ2y0
LGTM retweeted
ICYMI: QL snapshots for analysis of large open source projects are now available. If you want to perform #VariantAnalysis on large OSS projects, get more info here: hubs.ly/H0kNyk70
LGTM retweeted
Are you a #Python developer? We take a look at different categories of #security concerns and how to find and fix them with QL hubs.ly/H0kHzCC0
LGTM retweeted
The #SemmleCTF Challenge ends today! Last chance to submit your QL query for a chance to win wireless headphones. Winners will be announced next week... stay tuned! hubs.ly/H0kC1WS0
LGTM retweeted
.@fjserna shares what "open security" means to him and highlights OSS-Fuzz, @github and other projects which are leading the way. hubs.ly/H0klhGW0
LGTM retweeted
We just extended the #SemmleCTF Challenge from #BlackHat until Sept 6!
Simply follow these instructions to find real vulnerabilities in Das U-Boot using QL and submit your query for a chance to win a pair of these! hubs.ly/H0ksPnh0
LGTM retweeted
In case you missed us at #BlackHat2019, check out the recap of @fjserna's preso on finding vulns in Das U-Boot, @baron_von_ryan's #SemmleCTF challenge, and the penthouse party with our friends from @IOActive hubs.ly/H0kpFxg0
LGTM retweeted
.@Nosoynadiemas from @semmle security research team discovers 11 bugs in VLC. The most critical could be used to run arbitrary code on a victim's computer. Get details here: hubs.ly/H0kl8D90
LGTM retweeted
Can automated tests actually harm your Javascript, Python, or Java code? We look at thousands of LGTM projects to determine how to avoid negative side effects and enjoy the benefits of test code. hubs.ly/H0khLhx0
LGTM retweeted
Are you a Python programmer trying to make a project Python 3 compatible? This post will show you how to write custom queries to find issues quickly. hubs.ly/H0kffjt0
LGTM retweeted
Are unit tests really effective in preventing bugs? We analyzed over 50k LGTM projects in Java, Python, and Javascript to find out. hubs.ly/H0k9Bq70
LGTM retweeted
Who analyses an OSS project’s security over time? Check out these 4 #OpenSecurity project examples that are raising the OSS bar - #ossfuzz @github #internetbugbounty hubs.ly/H0k63jM0