Security Scanning

3 guides tagged “Security Scanning”.

  1. How to Add SAST Scanning to a GitHub Repo Add SAST to a GitHub repo with CodeQL or Semgrep, block on critical findings, and tune the noise. A practical, copy-pasteable tutorial. Information Security beginner 7 min
  2. What Is Static Application Security Testing (SAST)? SAST scans your source code for vulnerability patterns before it runs — catching SQL injection, XSS, and more at the earliest stage. Learn the basics. Information Security beginner 7 min
  3. How to Add Security Scanning to Your CI/CD Pipeline Add secret, dependency, and SAST scanning to a GitHub Actions pipeline. A practical tutorial with working workflow YAML. DevOps intermediate 9 min