This repository is a hands-on lab: wire Google CodeMender into a CI/CD pipeline as an autonomous security guardrail that scans, blocks deployment on HIGH/CRITICAL bugs, and opens a pull request that fixes them. The target app is OWASP Juice Shop (intentionally vulnerable).
➡️ Students start here: lab/README.md
➡️ Instructors / graders: lab/INSTRUCTOR.md
The pipeline lives at
.github/workflows/codemender-pipeline.yml.