SAST

3 guides tagged “SAST”.

  1. What Is an Automated Security Review (and What Does It Miss)? An automated security review reads a diff against known vulnerability classes. It finds patterns, not absent features, and it needs triage. Information Security intermediate 5 min
  2. How to Add SAST Scanning to a GitHub Repo Add SAST to a GitHub repo with CodeQL or Semgrep, block on critical findings, and tune the noise. A practical, copy-pasteable tutorial. Information Security beginner 7 min
  3. What Is Static Application Security Testing (SAST)? SAST scans your source code for vulnerability patterns before it runs — catching SQL injection, XSS, and more at the earliest stage. Learn the basics. Information Security beginner 7 min