Secure Coding with AI
Secure SDLC — prompt-injection risks and reviewing AI-generated code safely
Module 1
Secure Coding Mindset and RoE
What secure coding is; YOUR repo only.
6 lessons
Module 2
Secure SDLC
SDLC stages, threat in design, shift-left habits.
5 lessons
Module 3
Input Validation
Trust boundaries, allowlists, injection defense shapes.
5 lessons
Module 4
Output Encoding
Context encoding, XSS defense, SQL bind.
5 lessons
Module 5
Errors and Auth Storage
Safe errors, password hashing literacy, never plaintext.
5 lessons
Module 6
Sessions and OAuth Literacy
Session hygiene, CSRF defense, OAuth roles — no phishing kits.
5 lessons
Module 7
SAST Literacy
Static analysis, triage, CI gates on YOUR repo.
5 lessons
Module 8
DAST and Dependencies
Lab-only DAST; dependency audits on YOUR lockfiles.
5 lessons
Module 9
Secrets in Code
Secret shapes, gitleaks literacy, rotation response.
5 lessons
Module 10
Capstone and Topic Quiz
Checklist, review notes, pipeline sketch, full lab + topic quiz.
5 lessons