Tutorial: Scanning GitHub Code Repositories with Amazon Inspector

Summary

A tutorial demonstrates connecting Amazon Inspector to a GitHub repository to scan code for issues such as SQL injection and sensitive information exposure, with findings and recommendations appearing after code changes are pushed.

Key points

• The video demonstrates Amazon Inspector’s code repository scanning using a Python project connected to GitHub.
• Example findings include SQL injection, OS command injection, and sensitive information leakage from printing a decoded JSON web token.
• Findings identify the vulnerable code location and provide a recommendation.
• The setup connects and authorizes Amazon Inspector for GitHub repositories, then monitors the configured project.
• After a code change is committed and pushed, the scan updates and reports findings.