BUILD & TEST PHASE
Pipeline Security (SAST/DAST/SCA)
Security scanning embedded directly into CI/CD workflows with automated quality gates. Static analysis for code vulnerabilities, dependency scanning for supply chain risk, and dynamic testing against running applications.
Tools I use
SemgrepTrivyCheckovOWASP ZAPGitHub ActionsSnyk
Related projects
DEVSECOPS
Automated Security Gate Pipeline
CONTAINER SECURITY
EKS Security Hardening & Runtime Threat Detection