Security Testing & Vulnerability Scanning

What you'll build

Security testing catches vulnerabilities that functional tests miss. This lab covers Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and dependency scanning — automated into the CI/CD pipeline so every commit is checked.

Skills you'll practice

• Integrate SAST into the pipeline
• Run DAST against staging mesh
• Scan dependencies for known vulnerabilities
• Triage and remediate security findings
• Automate security gates in CI/CD

Before you start

• CI/CD Pipelines course
• Security Hardening & Pen Testing lab
• Agent tier access

Lab steps3 steps

1. 1
   Step 1: Static Analysis (SAST)
2. 2
   Step 2: Dynamic Analysis (DAST)
3. 3
   Step 3: Dependency Scanning