Update 8-cicd.livemd

Author: hvalkerie19

modules/8-cicd.livemd

@@ -27,17 +27,22 @@ This module will cover over some of the automated processes you may see in a CI/
 Built in Elixir, for Elixir, by NCC Group - this tool will try to determine whether your codebase has a number of web vulnerabilities as well as the insecurites outlined in [Module 5 - Elixir Security](./5-elixir.livemd).
 
  ### <span style="color:blue;">Example</span> 
+Install Sobelow and add it to your application dependicies or install it by following the instructions https://hexdocs.pm/sobelow/readme.html
 
-https://hexdocs.pm/sobelow/readme.html
 [Sobelow](https://sobelow.io/)
-There are a number of security issues published 
-Common Weakness Enumeration (CWE) - [CWE's](https://cwe.mitre.org/top25/archive/2022/2022_cwe_top25.html)
-OWASP Top 10 [OWASP Top 10](https://owasp.org/www-project-top-ten/)
-to start.  Scanning tools like Sobelow map code patterns that may contain weakness that match these issues and report them back to developers/users.
-Depending on the tool, one or more of the issues listed may be supported/discoverable and tools by programming language.
 
+Scan your project by running the following at a terminal in your project's root directory
+```
+$ mix sobelow
+
+```
+As a vulnerabilities scanner there are multiple categories of vulnerabilities sobelow is capable of discovering/reporting on.    
+
+For instance, there are a number of security issues published on the Common Weakness Enumeration (CWE) site - [CWE's](https://cwe.mitre.org/top25/archive/2022/2022_cwe_top25.html) and on OWASP Top 10 [OWASP Top 10](https://owasp.org/www-project-top-ten/).  
+
+Scanning tools like Sobelow map code patterns that may contain weakness that match these issues and report them back to developers/users.
 
-For example, let's say you are interested in Injection Vulnerabilities.  There are several types of injection.  Referring to the CWE list, we see that #17 CWE-77 is for Command Injection, #25 CWE-94 is Code Injection, and #3 CWE-89 is SQL Injection.  If we look at the Owasp Top 10 for 2021, A03:2021-Injection is third on the list.  Sobelow has the capability to detect these types of attacks.
+Let's say you are interested in Injection Vulnerabilities.  There are several types of injection.  Referring to the CWE list, we see that #17 CWE-77 is for Command Injection, #25 CWE-94 is Code Injection, and #3 CWE-89 is SQL Injection.  If we look at the Owasp Top 10 for 2021, A03:2021-Injection is third on the list.  Sobelow has the capability to detect these types of attacks.
 
 Injection issues are places in an application where a malicious actor can send commands, queries, that get processed as authorized code, to trigger the application into performing an unauthorized action.