Abstract

Datadog Code Security scans your first-party code and the open source libraries used in your applications, in both your repositories and your running services. This course focuses on Static Code Analysis (SAST): finding vulnerabilities in your first-party application code, such as SQL injection, cross-site scripting, and insecure cryptography, before they reach production. You'll connect a source code repository to Datadog, triage real SAST findings using severity context, assess exploitability and apply suggested remediations, customize detection rules, and enforce a policy in your CI pipeline that blocks insecure code from merging.

Learning Objectives

By the end of this course, you will be able to:

  • Connect the Datadog source code integration and enable SAST scanning
  • Triage first-party code vulnerabilities in the Vulnerabilities Explorer
  • Interpret the Datadog Severity Score breakdown (base, code context, and reachability)
  • Use Bits AI to assess exploitability and apply suggested remediations
  • Customize SAST rules and severity overrides
  • Enforce your policies in CI and gate merges on pipeline results

Primary Audience

Application developers, security engineers, and DevOps engineers who want to catch code vulnerabilities early in the development workflow. Learners should be comfortable with Git and CI/CD fundamentals; no prior Datadog Code Security experience required.

Prerequisites

Technical Requirements

In order to complete the course, you will need:

  • Google Chrome or Firefox
  • Third-party cookies must be enabled to access labs

Course Navigation

At the bottom of each lesson, click MARK LESSON COMPLETE AND CONTINUE button so that you are marked complete for each lesson and can receive the certificate at the end of the course.

Course Enrollment Period

Please note that your enrollment in this course ends after 30 days. You can re-enroll at any time and pick up where you left off.

Course curriculum

    1. Introduction

    1. Introduction to Code Security Repository Scanning

    2. Static Code Analysis (SAST) Deep Dive

    3. Developer Workflow Integration and Triage

    1. Lab: Find and Fix Code Vulnerabilities with Datadog Static Code Analysis (SAST)

    1. Summary

    2. Feedback Survey

Find and Fix Code Vulnerabilities with Datadog Static Code Analysis (SAST)

  • 2.5 hours to complete
  • Intermediate
Enroll for free