Update review to match updated exercise steps

Author: chriswblake

.github/steps/x-review.md

@@ -1,18 +1,19 @@
 ## Review
 
-Here's a recap of the tasks you accomplished:
+Great job completing the exercise! You have now:
 
-- Enabled CodeQL on your repository.
-- CodeQL scanned the code in your repository and notified us of two SQL injection vulnerabilities.
-- Reviewed the findings, marked the findings as closed, and explored the audit trail.
-- Fixed your code in the main branch and saw that the findings automatically closed out.
-- Introduced a new vulnerability in a new branch.
-- Created a pull request, and were notified of the vulnerability.
+- Enabled Code Scanning with CodeQL in your repository.
+- Introduced and detected a vulnerability using a pull request.
+- Reviewed and triaged CodeQL alerts.
+- Fixed a security vulnerability and verified the alert was resolved.
+
+By following these steps, you’ve learned how to use GitHub’s security features to keep your codebase safe. Remember, regularly reviewing and addressing security alerts is an important part of maintaining healthy projects.
 
 ### What's next?
 
-- Continue your learning! Our [code scanning documentation](https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-code-scanning) is a great resource for learning more about CodeQL.
-- Learn more about CodeQL. Take a look at the [CodeQL documentation](https://codeql.github.com/docs/) site to learn about all of the features of this powerful tool.
 - [Take another Skills exercise.](https://github.com/skills).
-- [Read the GitHub Getting Started docs](https://docs.github.com/en/get-started).
-- To find projects to contribute to, check out [GitHub Explore](https://github.com/explore).
+- Visit the [CodeQL documentation](https://codeql.github.com/docs/) to learn about about customizing your code scanning.
+- Check out the [code scanning documentation](https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-code-scanning) to learn about connecting 3rd party scanning tools
+- Explore the [CodeQL CLI & VS Code extension](https://codeql.github.com/docs/codeql-cli/) to run and write custom queries locally.
+- Read the [triaging code scanning alerts guide](https://docs.github.com/en/code-security/code-scanning/managing-code-scanning-alerts/triaging-code-scanning-alerts-in-pull-requests) for best practices on investigating alerts.
+- Learn about [advanced CodeQL query features](https://docs.github.com/en/code-security/codeql-for-vs-code/using-the-advanced-functionality-of-the-codeql-for-vs-code-extension/creating-a-custom-query) to build complex custom analyses.