Secure › Module 10 › Lesson 2
Review Notes
Index redacted lab artifacts — sessions lab, SAST, DAST, deps, gitleaks evidence.
Visual · t17_review_notes
Review notes = table of contents for YOUR secure coding work. Original Cyberlium.
Opening
Reviewers trust indexed evidence — not a folder called final_secrets_v3.
Build review index listing capstone artifacts: path, date, one-line description, redaction note. Include sessions/CSRF lab, SAST triage output, CI workflow snippet, DAST baseline summary, dependency audit fix, gitleaks clean scan, rotation runbook. All from $REPO/$LAB_URL — no employer tickets, no classmate scan dumps, no production screenshots without authorization. chmod 600 index.
1. Index fields
Artifact name, module lesson, file path, UTC date, description, redactions applied.
Cross-link checklist row to index row.
Command guide
Try these commands — Index fields
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Code review guide — https://owasp.org/www-project-code-review-guide/ CWE Top 25 — https://cwe.mitre.org/top25/
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install python3
macOS:
Command — copy this
brew install python3
Windows: Download https://python.org/downloads/
═══ LINUX / macOS ═══
Command — copy this
python3 -c "print('Review: 3 findings + CWE IDs on YOUR toy repo')"
grep -rE 'CWE-[0-9]+|finding' "$HOME/cyberlium-lab/t17-"*.txt 2>/dev/null | head -10 || echo 'Add review notes with CWE references'Primary tools to practice this lesson: grep, python3. Reference sites: Code review guide (https://owasp.org/www-project-code-review-guide/); CWE Top 25 (https://cwe.mitre.org/top25/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Redaction rules
Remove live tokens, internal URLs outside lab, real names if sharing mentor.
Synthetic secrets labeled FAKE in index.
3. Integrity habit
Optional hash index after final edit for personal record.
No uploading pack with secrets to public repos.
4. What you ship: review notes index
Index table with ≥6 artifacts from $REPO modules.
5. What you record before the next lesson
Review index path.
6. Wrong vs right: stranger apps vs YOUR repo
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Include unredacted gitleaks hit with live key in mentor zip.
Right
Index redacted artifacts. Next: pipeline sketch.
Mission: review index
1) List sessions + SAST + DAST + deps + gitleaks artifacts. 2) Add path and date each. 3) Note redactions applied.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Minimum artifacts for capstone?”
Knowledge Check
APPLY: Review index is:
Multiple choice
Knowledge Check
APPLY: True or False: Live secrets in mentor pack OK.
True or False
Knowledge Check
APPLY: Index should note:
Multiple choice