# DevOpsDays Singapore 2024: Unmasking the security pitfalls in AI-generated code

DevFeed: [DevOpsDays Singapore 2024: Unmasking the security pitfalls in AI-generated code](<https://devfeed.tech/articles/devopsdays-singapore-2024-unmasking-the-security-pitfalls-in-ai-generated-code-7891.md>)

Original publisher: [Read original article](<https://snyk.io/blog/devopsdays-singapore-ai-generated-code/>)

Author: Hiroko Nakano

Published: 2024-04-23T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [AI Development](<https://devfeed.tech/topics/ai-development.md>), [Application Security](<https://devfeed.tech/topics/application-security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [DevOps](<https://devfeed.tech/topics/devops.md>), [GitHub Copilot](<https://devfeed.tech/topics/github-copilot.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [application-security](<https://devfeed.tech/tags/application-security.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [aws](<https://devfeed.tech/tags/aws.md>), [blog](<https://devfeed.tech/tags/blog.md>), [coding](<https://devfeed.tech/tags/coding.md>), [community](<https://devfeed.tech/tags/community.md>), [copilot](<https://devfeed.tech/tags/copilot.md>), [developer](<https://devfeed.tech/tags/developer.md>), [devops](<https://devfeed.tech/tags/devops.md>), [gemini](<https://devfeed.tech/tags/gemini.md>), [github](<https://devfeed.tech/tags/github.md>), [security](<https://devfeed.tech/tags/security.md>), [security-tools](<https://devfeed.tech/tags/security-tools.md>), [snyk](<https://devfeed.tech/tags/snyk.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

## AI overview

The article summarizes Lawrence Crowther's DevOpsDays Singapore 2024 presentation on integrating security into DevOps while using AI-generated code. It discusses productivity benefits from tools such as GitHub Copilot, AWS Code Whisperer, and Google Gemini, alongside risks including SQL injection, XSS, outdated libraries, and other vulnerabilities. A Java search-functionality demonstration shows how Copilot can suggest insecure SQL and how appropriate prompts and security tools such as Snyk can help identify and correct these issues.

## Source excerpt

At DevOpsDays Singapore 2024, Snyk's Lawrence Crowther was featured as a keynote speaker. Here are some highlights from his presentation on the critical security integration within DevOps processes, focusing on AI-generated code and its potential to revolutionize software development while exposing vulnerabilities.