AI-generated code crosses trust boundaries from development tools into repositories, continuous integration, and production, so it must remain untrusted until verified. This course helps developers identify recurring security weaknesses, examine AI-written changes, apply automated gates, and establish controls that make verification part of everyday development. You will leave with practical methods for assessing risk, demanding secure output, and governing AI coding tools across a team.
The course covers trust boundaries, injection and command composition, hard-coded secrets, insecure defaults, dependency hallucinations, pull-request review, SAST, software composition analysis, secret scanning, secure prompting, and team governance. It also addresses merge-blocking policies, ownership routing, data boundaries, agent privilege, traceability, and repository controls.