GeekMasher's Blog

2024

Talk - 'Konarr: A Story of Building a Software Composition Analysis Platform' at DC44131
Security Talk Konarr AppSec SCA Container Security
Launching Konarr
Konarr Security AppSec Containers Homelab Supply Chain

2023

Using Neovim to Help Develop Secure Code - NeovimConf 2023
Development Security Neovim DevSecInspect SAST SCA
Talk - 'Introduction to CodeQL' at DC44131
Security AppSec SAST Static Code Analysis YouTube
SecuriTree: A TreeSitter based Security Tool for Neovim
Security AppSec SAST Static Code Analysis YouTube
SQL Injection in Rust; still possible?
Security AppSec Rust RustLang YouTube

2022

Debugging CodeQL Databases using Partial Paths
Security Static Code Analysis Static Application Security Testing SAST GitHub CodeQL Query Language
Quibble: Part 1 - Designing a Container Security Tool
Security Containers Compose Docker Podman Quibble Tools Homelab

2020

Introduction to CodeQL and Code Scanning
Security Static Code Analysis Static Application Security Testing SAST Semmle GitHub GitHub Advance Security CodeQL Query Language

2019

Introduction to SQL Injection
Security InfoSec SQL SQL Injection Injection Attacks OWASP OWASP Cheat sheet Java Mitigation Protections Prepared Statements Parameterized queries Object Relationship-Mapping Frameworks