Adding SAST to Your CI/CD Pipeline: What You Should Know

[DZone]

As custom applications become a key differentiator for enterprises, speed of code release has become a competitive advantage, and CI/CD pipelines are what make high-velocity development possible.

What Is a CI/CD Pipeline?

A continuous integration and continuous delivery (CI/CD) pipeline is the process that drives software development through the stages of building, testing, and deploying code. By automating the process, teams can minimize human error and maintain a consistent process for software releases. The pipeline includes tools such as code compilation, unit testing, code analysis, security, and binary generation. For containerized environments, this pipeline also includes ways to package code into container images and deploy them to a cloud environment. Review DZone's guide to container security.

View the full article