Secure Code Review Review code for vulnerabilities systematically, not line-by-line. 1. Orient - What does this code do? Identify: entry points, trust boundaries, data stores, privileged operations - Read the tests — what invariants do they reveal? - Check the diff's blast radius: auth logic? parsing? file handling? crypto? 2. Trace Untrusted Data Follow each input from entry point to sink: | Sink Class | What to Verify | |---|---| | SQL/NoSQL | Parameterized; no string-built queries; identifiers whitelisted | | Command exec | No user data in shell strings; argv-array APIs; no shell=True | |…