Securing Node Applications with Automated Security Testing in CI/CD
watch on portal.gitnation.org ↗https://portal.gitnation.org/contents/securing-node-applications-with-automated-security-testing-in-cicdsummary
Covers automated security testing for Express/Node apps in CI/CD, comparing static analysis (SAST), dynamic application security testing (DAST), and software composition analysis, and explains why developers must integrate security into cloud-native development and infrastructure responsibilities. Demonstrates using StackHawk (DAST) and Snyk (SCA) to find and fix vulnerabilities and shows how developer-friendly tools help detect bugs earlier rather than in production.
AI-written summary · about
related talks
26mBeyond Testing: Application Security in the Age of DevOps
28mWhy Developers Struggle with AppSec
39mSecurity Tooling in Your DevOps Pipeline
42mContinuous Security: Integrate security tools into your DevOps Pipeline
29mSecuring Your Web Application Pipeline From Intruders
44mSecurity Practices Useful in Agile Development
15mDev-first API and application security testing
40mSecurity-as-Code to Accelerate DevSecOps, a Practical Guide to Get Started