Android App Security Testing with SAST

This post introduces the integration of Mobile Static Application Security Testing (SAST) for Android applications written in Java and Kotlin. It explains that SAST analyzes source code for vulnerabilities using the Mobile Security Framework (MobSF) and its regex-based rules. The post also details how to contribute custom rules to MobSF and integrate custom scanners into GitLab's merge request pipeline and security dashboards.