Skip to content

Commit a875d9e

Browse files
committed
remove intro exercise
1 parent e98e05d commit a875d9e

File tree

1 file changed

+4
-17
lines changed

1 file changed

+4
-17
lines changed

_labs/lab1.md

Lines changed: 4 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -8,27 +8,14 @@ This lab covers parts of the following exam domains:
88
- Domain 3: Configure and use dependency management
99
- Domain 4: Configure and use code scanning
1010

11-
## Exercise 1: Create the repository
12-
13-
We need to provision our working copy of the repository in order to begin the labs!
14-
15-
1. Navigate to URL: [https://github.com/ghuwsec1953/juice-shop-ghas-workshop](https://github.com/ghuwsec1953/juice-shop-ghas-workshop)
16-
2. Click on the **Use this template ▾** button and select **Create a new repository**.
17-
3. Make sure you have the **ghuwsec1953** organization selected as the **Owner**.
18-
4. Name the repository **YOUR_USERNAME-juice-shop-ghas-workshop**.
19-
5. Set the repository visibility to **Internal**.
20-
6. Click the green **Create repository** button to create the repository.
21-
22-
Once the repository is created, you will be automatically redirected to it. Continue on to Exercise 2.
23-
2411
> [!TIP]
2512
> We recommend opening up two browser windows, one with the lab and one with the working copy of your repo!
2613
27-
## Exercise 2: Enabling the security settings
14+
## Exercise 1: Enabling the security settings
2815

2916
In this exercise, you will be guided through the process of enabling the remaining GHAS features. Then you will be shown how to use the features to secure your code.
3017

31-
### Exercise 2.1: Enable Dependabot
18+
### Exercise 2: Enable Dependabot
3219

3320
Although Dependabot isn't part of the GitHub Advanced Security product suite, it is still an important tool to discuss from an overall security posture.
3421

@@ -44,7 +31,7 @@ Although Dependabot isn't part of the GitHub Advanced Security product suite, it
4431
<img src="images/lab-1-1-1.png"/>
4532
</details>
4633

47-
### Exercise 2.2: Enable Code Scanning
34+
### Exercise 3: Enable Code Scanning
4835

4936
1. Next, let's enable **Code Scanning with CodeQL**. These settings are also under the **Code security** settings page.
5037
2. Click the **Enable** button next to GitHub Advanced Security.
@@ -76,7 +63,7 @@ Although Dependabot isn't part of the GitHub Advanced Security product suite, it
7663
7764
7. Optionally, configure the **Check runs failure threshold** - by default, a pull request will be blocked if there are any high or higher security alerts.
7865

79-
### Exercise 2.3: Enable Secret Scanning
66+
### Exercise 4: Enable Secret Scanning
8067

8168
1. Click on the **Enable** button to enable Secret Scanning.
8269
2. Check the box to **Scan for generic secrets**. This feature uses AI to find secrets/passwords that may be in your code that don't correspond to a known provider pattern.

0 commit comments

Comments
 (0)