Tutorials | 42Crunch
Hands-on tutorials for securing AI-generated API code.
Step-by-step guides for auditing and scanning code and contracts generated by Codex, Copilot, and Claude Code — plus CI/CD and IDE integrations.
Tutorials
Hands-on walkthroughs for auditing and scanning AI-generated API code and contracts, plus CI/CD and IDE integrations.
| Audit Codex Generated API Contract | Audit of the OpenAPI spec file produced by Codex, with automatic remediation of blocking issues. |
| Scan Codex Generated Code | Automatically scan and remediate API code generated by Codex for vulnerabilities. |
| Scan Copilot Generated Code | Automatically scan and remediate API code generated by GitHub Copilot for vulnerabilities. |
| Scan Claude Code Generated Code | Automatically scan and remediate API code generated by Claude Code for vulnerabilities. |
| Audit Claude Code Generated API Contract | Audit of the OpenAPI specification produced by Claude Code, with automatic remediation of blocking issues. |
| Testing for BOLA and BFLA | How to avoid authorization vulnerabilities such as BOLA and BFLA. |
| Security best practices, testing for BOLA | A detailed explanation of BOLA and how to avoid falling victim to this OWASP API1:2023 vulnerability. |
| Automatic Generation of OpenAPI Contracts with API Contract Generator | Automates the manual task of creating OpenAPI contracts from Postman collections and captured API traffic. |
| API Security Testing in GitHub Actions | Run API Audit and API Scan directly from a GitHub Actions pipeline. |
| API Security & Conformance Scan via the Swagger Editor Extension in VS Code | Dynamic security scan of your API to check for conformance and security vulnerabilities, without leaving the editor. |
| Automatic Generation of OpenAPI Contracts with API Capture | Automates creating OpenAPI contracts from Postman collections and observed API traffic. |
| API Security Platform Overview | A tour of the platform – dashboard, core security features, navigation and API collections. |
| API Security Testing with API Scan | Dynamic testing that finds misconfigurations between your running API and its definition. |
| API Security Audit via the Swagger Editor Extension in VS Code | Run a security audit on your OpenAPI file and work through the report without leaving the editor. |
| OpenAPI Swagger Editor Extension in VS Code | Create and navigate OpenAPI files in VS Code with the 42Crunch editor, Intellisense and Try-it. |
| OpenAPI (Swagger) Security Audit on the Platform | Import an OpenAPI definition, run the security audit and read the resulting report. |
| Security Audit Report Explained | How the audit score works, how to navigate and filter the report, and where remediation advice lives. |
| Fixing API Security Issues from the Audit Report | Work through the issues the audit found and iteratively tighten your OpenAPI definition. |
| BitBucket Pipelines API Security Audit Extension | Add the Audit pipe to a BitBucket pipeline and gate builds on API security. |
| API Protection Micro API Firewall | Runtime protection and policy enforcement at the edge of your API, and how to deploy it. |
| API Protection Reports and Troubleshooting | Read protection reports, inspect transaction logs, look up errors and use non-blocking mode. |