Which type of security testing should be performed as a part of a CI/CD pipeline by analyzing the source code itself without compiling the code into a running executable?
A) Dynamic Application Security Testing
B) Runtime Application Health-Protection
C) Continuous Application Security Testing
D) Static Analysis Security Testing

Question

Quizplus · Accepted Answer

Static Analysis Security Testing (SAST) is performed by analyzing the source code itself without compiling it into a running executable, making it suitable for integration into a CI/CD pipeline.

Which Type of Security Testing Should Be Performed as a Part