Merge pull request #47 from trailofbits/codeql-update

Update CodeQL chapter

Author: ahpaleus

content/docs/static-analysis/codeql/10-advanced.md

@@ -201,6 +201,16 @@ version.)
 
 ## Writing custom queries
 
+{{< hint info >}}
+To write custom CodeQL queries, you need access to the standard libraries and queries. We recommend using the starter workspace.
+
+1. Clone the [vscode-codeql-starter](https://github.com/github/vscode-codeql-starter.git) repository to your computer:
+`git clone --recursive https://github.com/github/vscode-codeql-starter.git`
+2. In VSCode, click **File** -> **Open Workspace from File** and open the
+`vscode-codeql-starter.code-workspace` file from the `vscode-codeql-starter` repository
+
+{{< /hint >}}
+
 QL is a declarative language and CodeQL queries are expressed using an SQL-like
 syntax on the following form:
 

content/docs/static-analysis/codeql/99-resources.md

@@ -17,6 +17,7 @@ weight: 99
 
 ### Learning resources for CodeQL
 
+- [CodeQL zero to hero part 1: The fundamentals of static analysis for vulnerability research](https://github.blog/2023-03-31-codeql-zero-to-hero-part-1-the-fundamentals-of-static-analysis-for-vulnerability-research/)
 - [QL language tutorials](https://codeql.github.com/docs/writing-codeql-queries/ql-tutorials/)
 - [GitHub Security Lab CodeQL CTFs](https://securitylab.github.com/ctf/)
 
@@ -25,6 +26,9 @@ weight: 99
 - [Practical introduction to CodeQL](https://jorgectf.github.io/blog/post/practical-codeql-introduction/)
 - [Security code reviewing with CodeQL](https://web.archive.org/web/20240529182656/https://remcovermeulen.com/posts/security-code-reviewing-with-codeql/)
 - [Sharing security expertise through CodeQL packs (Part I)](https://github.blog/2022-04-19-sharing-security-expertise-through-codeql-packs-part-i/)
+- :cinema: [Finding Security Vulnerabilities in C/C++ with CodeQL](https://www.youtube.com/watch?v=eAjecQrfv3o)
+- :cinema: [Finding Security Vulnerabilities in JavaScript with CodeQL](https://www.youtube.com/watch?v=pYzfGaLTqC0)
+- :cinema: [Finding Security Vulnerabilities in Java with CodeQL](https://www.youtube.com/watch?v=nvCd0Ee4FgE)
 
 ### Using CodeQL for vulnerability discovery