Abstract

Datadog Code Security scans your first-party code and open source libraries in both your repositories and running services. This course covers Secret Scanning, which finds hardcoded credentials like API keys, tokens, and passwords. You'll connect your source code repos and review real findings. You'll confirm which secrets are exploitable as well as identify false positives. Finally, you'll add CI gates and pre-push hooks to keep new secrets from landing in shared projects.

Learning Objectives

By the end of this course, you will be able to:

  • Connect the Datadog source code integration and enable Secret Scanning
  • Review leaked-credential findings for a connected repository
  • Use live validation to confirm whether a detected secret is still active
  • Prioritize findings by validation status, secret type, and severity
  • Remediate a leaked credential and record false positives with inline exclusions
  • Add a CI gate and a pre-push git hook that block new secrets from leaving a developer's machine

Primary Audience

Application developers, security engineers, and DevOps engineers who want to catch leaked credentials before they reach production. Learners should be comfortable with Git and CI/CD fundamentals; no prior Datadog Code Security experience required.

Prerequisites

Required

  • Basic familiarity with Git (clone, commit, push, merge requests)
  • Understanding of CI/CD pipelines
  • A web browser

Recommended

  • Completion of the Learning Environment course
  • Datadog Quick Start

Technical Requirements

In order to complete the course, you will need:

  • Google Chrome or Firefox
  • Third-party cookies must be enabled to access labs

Course Navigation

At the bottom of each lesson, click MARK LESSON COMPLETE AND CONTINUE button so that you are marked complete for each lesson and can receive the certificate at the end of the course.

Course Enrollment Period

Please note that your enrollment in this course ends after 30 days. You can re-enroll at any time and pick up where you left off.

Course curriculum

    1. Introduction

    1. Introduction to Code Security Repository Scanning

    2. Secret Scanning Deep Dive

    3. Developer Workflow Integration and Triage

    1. Lab: Detect and Block Leaked Secrets with Datadog

    1. Summary

    2. Feedback Survey

Detect and Block Leaked Secrets with Datadog

  • 2 hours to complete
  • 0 hours of video content
  • Intermediate
Enroll for free