Custom Labs lets you build tailored Code Review labs in just a few clicks, using your own demonstrative code or snippets. They help challenge developers with vulnerabilities that reflect the technologies and patterns they use every day.

In Code Review Labs, participants are guided through analyzing a given scenario, understanding the code and its associated vulnerability, and identifying the specific lines that lead to the security weakness. 

These labs can be fully customized to meet an organization’s specific training needs.

How Custom Labs Works

• The code for your Custom Lab is stored in a Git repository (GitHub or GitLab).
• You can edit or upload code directly using the platform’s built-in web IDE (for example, GitHub Codespaces or GitLab Web IDE).
• After your code is ready, simply tag your repository to automatically upload your labs to SecureFlag.
• Set up the lab by adding the required metadata in the platform.

1. Set Up a Git Repository

Ask your Customer Success Manager (CSM) to set up a new GitHub or GitLab repository for your Custom Labs. If you prefer to use your own existing repository, your CSM can also guide you through configuring it to work seamlessly with our platform.

Authentication Setup

As part of the setup, your Customer Success Manager will provide a unique Customer ID for your organization (for example, 123-org-name-1a2b3c4d). CI automation uses this ID to deploy your Custom Labs, and you will reference it later when writing the lab instructions.

If needed, AWS authentication tokens can also be configured to ensure secure communication between your repository and our platform.

2. Add Your Labs' Code

Repository Structure

Each lab's code lives in its own directory and represents a specific vulnerability scenario tailored to your team.

For each lab, the code must be placed under “labs/<flag name>/” either in GitLab or GitHub.

Flag name rules:

• Lowercase
• Alphanumeric characters only
• No spaces or special characters

Platform Agnostic

You don’t need Git installed locally to use Custom Labs. The system works with any Git-based repository that supports CI automation, making it easy to use with your existing GitHub, GitLab, or other Git platforms.

Editing Your Code

GitLab

GitHub

GitLab

You can upload or edit code directly online using GitLab Web IDE.

Add the code to the relevant repository by opening the file in the GitLab Web IDE and committing your changes there.

Below is an example of the directory structure for reference:

Once your code is uploaded, you can either commit it directly to the repository or create a merge request to review and merge the changes.

GitHub

You can upload or edit code directly online using GitHub’s VSCode Web Editor.

Add the code to the relevant repository by opening the file in the GitHub Web IDE and committing your changes there.

Below is an example of the directory structure for reference:

Once your code is uploaded, you can either commit it directly to the repository or create a pull request to review and merge the changes.

3. Deploy Your Code

After uploading or editing your lab code, tag your repository.

4. Write Your Metadata

After you have created the code, you’ll need to define the lab metadata in the SecureFlag platform to complete your custom lab setup.

To do this, navigate to the Management Portal, open the Labs tab, and click the Add Lab button.

1. Adding Description

Start by adding the title and other key details for your custom lab. You will need to provide:

1. Title of the lab
2. Subtitle of the lab
3. Author of the lab – typically your organization
4. Lab Type – select Code Review from the dropdown
5. Lab Status
6. Technology – the main technology used in your lab
7. Description – a description of the vulnerability covered
8. Max Duration – the expected time to complete the lab
9. Difficulty – the complexity level of the lab
10. Lab Framework

2. Information for the Lab

The Information tab explains how to run the code review labs. It serves as a setup guide to help you navigate the code, select a line, and submit your findings.

3. Adding Lab Flags

To add a Lab Flag, navigate to the Flags tab and click on Add New Flag. 

From there, you can define the flag title, select the Knowledge Base article related to your lab, set the maximum score, and provide the lab instructions.

Next, specify the offending line in your code where the vulnerability exists in the Vulnerability Code Ranges section.

You can also add a hint for the lab and configure the score deduction applied when the hint is used.

Once done, click Add Flag to save your changes.

4. Assign Tags

You can assign tags to the lab by entering them in the Tags text box.

5. Repository

In the Repository tab, enter the Customer ID provided by your Customer Success Manager, along with the flag name you configured for your lab in GitHub or GitLab.

Once everything is completed, click Add Lab to create the lab. You can then find your custom lab by searching in the Labs tab.

5. Create Infinite Learning Opportunities

Now that your Custom Labs are set up, you’re ready to engage your entire development community. Combine your own code, videos, and vulnerability references with SecureFlag’s content to create limitless learning paths. Custom Labs make the possibilities endless. Build, share, and challenge your developers in ways that best align with your organization’s goals.