Conf42: DevSecOps 2022

Kick Your Security Up a Notch with Custom Queries

Static analysis is a great tool that enable developers to create rules for their code base but the native rules, sometime just make extra noise and false alarms. We will demo how to create custom queries this with the open source tool KICS, but it is also applicable to other excellent SA tools.