9/2/20268 min read
SCA, SAST and DAST: how I added real security to my pipeline
For a long time, CI/CD to me was just build, test, deploy. None of those steps tell you if the code is secure. I implemented SCA, SAST and DAST in a real pipeline and learned in practice what each one catches — and what none of them replace.