Introducing browser-based DAST and integrated passive checks

What this post added

Introduced a new browser-based DAST analyzer that integrates passive checks by monitoring network traffic. This analyzer aims to reduce alert fatigue by implementing fewer checks, reducing false positives, and aggregating true positives. Passive checks are primarily written in YAML using a custom specification. The post details the history of DAST at GitLab, the challenges with the previous ZAP-based approach, and the technical decisions made to build the new analyzer.