312-97: EC-Council Certified DevSecOps Engineer (ECDE)Demo

By ECCouncil · Question Mode

QuestionQ44

Introduction to DevSecOps

William Scott, having recently completed his computer science degree, joined an IT company as a DevSecOps engineer. His team leader has instructed him to use GitHub Code Scanning to evaluate the source code in his organization's GitHub repository in order to detect security issues and coding errors.

Which method should William use to set up code scanning in the GitHub repository?

  • A By using GitMiner
  • B By using OWASP ZAP
  • C By using CodeQL
  • D By using Gauntlt
Explanation

GitHub Code Scanning is powered by CodeQL, GitHub's semantic code analysis engine, which converts source code into a queryable database and runs predefined or custom queries against it to identify security vulnerabilities, bugs, and coding errors. Setting up code scanning on a GitHub repository is done by enabling the CodeQL analysis workflow (via GitHub Actions or the default setup option), making CodeQL the correct tool for this task.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!