Use AI to Get Smarter Not Lazier (SAST triage as an example)

General
1

We tend to follow the “least resistance path” to our destination, and “AI” has given us an ultimate shortcut, the “do it for me” prompt. However, following this shortcut without understanding builds cognitive debt which accumulates over time, affecting our understanding and skills. In this video, I suggest a different approach where we use AI in a way that balances doing :zap: and understanding :brain:to move efficiently without building debt, and I show a demo of how to use AI for a day-to-day task (Triaging SAST finding) using this approach.

:movie_camera: Video: https://youtu.be/z_A_UVAFx0M

:memo: Blog: https://medium.com/appsec-untangled/use-ai-to-get-smarter-not-lazier-86226310d770

:pushpin: Demo repo: GitHub - mohamed-osama-aboelkheir/ai-sast-triage-demo: Deliberately vulnerable Express + Postgres app with Semgrep findings, for practising AI-assisted SAST triage that builds understanding. Demo from 'Use AI to Get Smarter, Not Lazier' (AppSec Untangled). · GitHub

:toolbox: Skills: GitHub - mohamed-osama-aboelkheir/appsec-untangled-resources: Security code review resources: an AppSec wiki and a Claude Code review skill. From the AppSec Untangled blog. · GitHub