SecuritySAST, SCA and Secret Scanning: The Three Layers Every CI Pipeline Needs
Before talking about DAST, IAST or supply chain, every pipeline needs three basic layers: SAST for code, SCA for dependencies, secret scanning for keys/tokens. Here is how to set them up with Semgrep, Trivy and Gitleaks.
Duy Tran10 min