How can static analysis help DevOps teams maintain velocity securely? - Seguridad Mania.com - España y América Latina

Static application security testing (SAST) is the process of examining source code for security defects. SAST is one of many checks in an application security assurance program designed to identify and mitigate security vulnerabilities early in the DevOps process. Integrating SAST tools into DevOps processes is critical to building a sustainable program. And automating these tools is also an important part of adoption, as it drives efficiency, consistency, and early detection. If you have questions like these, and you’re concerned about integrating SAST tooling into your DevOps process, this session will offer actionable advice to automate security testing that supports DevOps velocity. But DevOps practitioners looking to integrate SAST tools into the DevOps pipeline often have questions: How do I manage false positives? How do I triage the results? What happens to new issues identified? How can I use a tool in my DevOps pipeline?