Add some updates to the instructions

Author: therealkujo

README.md

@@ -7,7 +7,7 @@
 > This bootcamp is designed to help familiarize you with GitHub Advanced Security (GHAS) so that you can better understand how to use it in your own repositories.
 
 ## :mega: Prerequisites
-To participate in the workshop you need a GitHub account and need to be invited to the workshop organization [ghas-bootcamp](https://github.com/ghas-bootcamp). If your repository hasn't been automatically created in the workshop organization, either click `Use this template` and create a repository under this organization, or create a new repository and push a copy of the `ghas-bootcamp` repository.
+To participate in the workshop you need a GitHub account and need to be invited to the workshop organization [ghas-bootcamp](https://github.com/ghas-bootcamp). If your repository hasn't been automatically created in the workshop organization, either click `Use this template` and create a repository under this organization, or create a new repository and push a copy of the `ghas-bootcamp` repository to an organization with GHAS enabled.
 
 ```bash
 git clone https://github.com/ghas-bootcamp/ghas-bootcamp.git

exercises/lab 2 - secret-scanning.md

@@ -47,6 +47,8 @@ While we can close a detected secret as being used in a test, we can also config
 
     Use a pattern to exclude the file `storage-service/src/main/resources/application.dev.properties`
 
+    Merge your changes to `.github/secret_scanning.yml` to your default branch before going to the next step.
+
     <details>
     <summary>Solution</summary>
     A possible solution is:

exercises/lab 3 - code-scanning.md

@@ -51,9 +51,10 @@ CodeQL requires a build of compiled languages, and an analysis job can fail if o
     <details>
     <summary>Solution</summary>
 
-        uses: actions/setup-java@v1
+        uses: actions/setup-java@v3.4.1
         with:
-            java-version: 15
+            java-version: 16
+            distribution: 'microsoft'
 
     </details>