Effective SAST: Secure Code Analysis in the CI/CD
summary
Covers practical use of Semgrep for static application security testing: running Semgrep on a codebase, interpreting findings, and writing custom Semgrep rules to reduce false positives. Explains how to integrate Semgrep into CI/CD pipelines to automate SAST and catch vulnerabilities earlier.
AI-written summary · about
related talks
42mNo Size Fits All: Empowering Engineers with Custom Application Security tests
26mSecurity Automation For GraphQL
31mFrom Noise to Notes: Orchestrating SAST with Developers... (Adrián Puente Z.)
32mSAST and Sensibility: A Rubyist’s Guide to Static...
39mPractical Static Analysis for Continuous Application Security
32mCatch Me If You can : Continuous Delivery vs. Security Assurance
17mShift-Left Security in Practice with Gitlab
49m"The SAST and the furious"