Skip to content

QUICK_START.md

Latest commit

 

History

History
248 lines (185 loc) · 6.81 KB

QUICK_START.md

File metadata and controls

248 lines (185 loc) · 6.81 KB

🚀 Quick Start Guide

Get started with the Secure Code AI Development Workshop in just 30 minutes! This guide will help you set up your environment and complete your first security scan.

⚡ Prerequisites Checklist

Before starting, ensure you have:

🏃‍♀️ 5-Minute Setup

Step 1: Clone the Repository

# Clone the workshop repository
git clone https://github.com/paulasilvatech/Secure-Code-AI-Dev.git
cd Secure-Code-AI-Dev

# Create your own branch
git checkout -b my-workshop-progress

Step 2: Run the Quick Setup Script

# Make the script executable (macOS/Linux)
chmod +x scripts/quick-setup.sh

# Run the quick setup
./scripts/quick-setup.sh

For Windows users:

# Run in PowerShell as Administrator
.\scripts\quick-setup.ps1

Step 3: Verify Installation

# Run verification script
./scripts/verify-setup.sh

You should see all green checkmarks ✅ for required tools.

🎯 Your First Security Scan (10 minutes)

1. Create a Sample Vulnerable Application

# Navigate to templates directory
cd templates/vulnerable-app

# Install dependencies
npm install

# Run initial security scan
npm audit

2. Enable GitHub Advanced Security

# Push to GitHub
git add .
git commit -m "Initial vulnerable app"
git push origin my-workshop-progress

# Enable GHAS in your repository settings
# Go to: Settings > Security & Analysis > Enable all

3. Fix Your First Vulnerability with AI

Open VS Code and use GitHub Copilot:

// Type this comment in app.js
// fix the SQL injection vulnerability in the login function

// Copilot will suggest secure code

📚 Quick Module Overview

Here's what you'll learn in each of the 10 modules:

Core Security (Modules 1-3)

  1. Shift-Left Security - Security fundamentals (1.5h)
  2. GitHub Advanced Security - GHAS features (1h)
  3. Security Environment Setup - Tools & configuration (1.5h)

AI-Powered Development (Modules 4-6)

  1. AI Secure Coding - GitHub Copilot for security (2h)
  2. Container Security - DevSecOps practices (2h)
  3. Agentic AI - Automated security agents (2h)

Enterprise Security (Modules 7-10)

  1. Multi-Cloud Security - Cross-cloud strategies (2h)
  2. Microsoft Sentinel - SIEM/SOAR setup (2.5h)
  3. Security Dashboards - Monitoring & reporting (2h)
  4. Advanced Patterns - Zero-trust & more (2.5h)

🛠️ Essential Commands Cheat Sheet

Git Commands

git status                    # Check current status
git add .                     # Stage all changes
git commit -m "message"       # Commit changes
git push origin branch-name   # Push to GitHub

Docker Commands

docker build -t app .         # Build image
docker run -p 3000:3000 app   # Run container
docker ps                     # List running containers
docker scan app               # Scan for vulnerabilities

Azure CLI Commands

az login                      # Login to Azure
az group create -n rg-workshop -l eastus  # Create resource group
az acr create -n myregistry -g rg-workshop --sku Basic  # Create container registry

Security Scanning

# GitHub CLI security commands
gh secret scan                # Scan for secrets
gh api /repos/{owner}/{repo}/code-scanning/alerts  # View alerts

# Local scanning
trivy fs .                    # Scan filesystem
snyk test                     # Test for vulnerabilities

🎓 Learning Paths

🚀 Express Path (3 hours)

Perfect for a quick introduction:

  1. Module 1: Shift-Left basics (45 min)
  2. Module 2: GHAS setup (30 min)
  3. Module 4: AI secure coding (90 min)
  4. Quick lab: Fix 3 vulnerabilities (15 min)

📚 Standard Path (8 hours)

Comprehensive security coverage:

  1. Complete Modules 1-7
  2. Hands-on labs for each module
  3. Build a secure CI/CD pipeline
  4. Deploy to cloud with security

🏆 Advanced Path (16+ hours)

Full enterprise implementation:

  1. All 10 modules in detail
  2. Multi-cloud deployment
  3. Complete monitoring setup
  4. Custom security agents
  5. Production-ready implementation

🔧 Troubleshooting Quick Fixes

Docker Not Running

# macOS/Windows
# Open Docker Desktop application

# Linux
sudo systemctl start docker

GitHub Authentication Issues

# Reconfigure GitHub CLI
gh auth logout
gh auth login

# Use personal access token
git config --global credential.helper store

Azure Login Problems

# Clear Azure credentials
az logout
az account clear
az login --use-device-code

📊 Success Metrics

Track your progress:

  • Completed environment setup
  • Ran first security scan
  • Fixed first vulnerability with AI
  • Enabled GHAS on repository
  • Completed at least 3 modules
  • Deployed secure application

🚦 Next Steps

  1. Complete Module 1 - Start Here
  2. Join Community - GitHub Discussions
  3. Share Progress - Post your achievements with #SecureCodeAI

🆘 Need Help?

🎉 Congratulations!

You're ready to start your secure coding journey! Remember:

  • Take breaks between modules
  • Practice with real code
  • Ask questions in discussions
  • Share your learnings

Ready for Module 1? → Start with Shift-Left Security

🛡️ Secure Code. 🤖 AI-Powered. 🚀 Production-Ready.

🧭 Navigation

Previous Up Next
📖 Main README 📚 Documentation 🚀 Workshop Overview

Quick Links: 🛡️ Security FAQ • 🔧 Troubleshooting • 📦 Products