4 Ways developers can write secure code with GitLab
Sep 3, 2019Vanessa Wegner

Summary
This post details the integration of several security testing tools within GitLab's CI/CD pipelines: Static Application Security Testing (SAST) for source code analysis, Secret Detection for unintentional credential pushes, Dynamic Application Security Testing (DAST) for runtime web application vulnerabilities, Dependency Scanning for external library vulnerabilities, Container Scanning for Docker image vulnerabilities, License Management for policy compliance, and Code Quality analysis. It also highlights the Project and Group Security Dashboards for vulnerability overview and management, and mentions upcoming features like Interactive Application Security Testing (IAST) and Fuzzing.