# Code Review and SAST

1. OWASP Code Review Project: The OWASP Code Review Project provides a comprehensive guide to code review, including best practices, methodologies, and tools.
2. Secure Code Warrior: Secure Code Warrior is an online platform that provides training and assessment on secure coding practices, including code review and SAST.
3. SANS Institute: The SANS Institute offers several courses on software security, including code review and SAST, taught by experienced security professionals.
4. Udemy: Udemy is an online learning platform that offers a variety of courses on software security, including code review and SAST.
5. Coursera: Coursera is another online learning platform that offers courses on software security, including code review and SAST.
6. Pluralsight: Pluralsight is an online learning platform that offers courses on software security, including code review and SAST.
7. Code Review Checklist: The Code Review Checklist is a comprehensive list of items to consider when reviewing code for security vulnerabilities, including best practices and guidelines for SAST.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://bugbounty-for-starters.humbertojunior.com.br/so-where-do-i-start/code-review-and-sast.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
