Static Analysis Security Testing (SAST) in CI/CD – why and how - Seguridad Mania.com - España y América Latina

Traditionally, and often unfortunately, security has been treated as a secondary and isolated process considered only at the end of the software development lifecycle (SDLC). Noble as their intentions are, it can be frustrating to discover security vulnerabilities at such a late stage. With the proliferation of agile development methodology and CI/CD, is it possible to leverage on Static Application Security Testing (SAST) tool to constantly verify the code changes and improve application integrity throughout the SDLC? In our 4th July 2019 webinar, Shi Chao, Senior Sales Engineering Manager, Synopsys Software Integrity Group, will provide insights into the following: •What is SAST? Are SAST Tools Glorified Grep? •What can SAST help? •Touch points – where and how do we apply SAST in CI/CD pipeline? •Considerations in choosing a SAST tool