Skip to main content
Vibgrate Graph: over 40% fewer tokens, same results
Back to Tags

Sast

5 items tagged with "sast"

Filter by type:

Best Practices1

Best Practice

Static Application Security Testing in CI

Integrating SAST tools into the CI pipeline to scan source code for security vulnerabilities automatically on every change.

Tutorials1

Tutorial

How to Add SAST Scanning to a CI Pipeline

Run static application security testing on every pull request, fail the build on high-severity findings, and report results as SARIF.

Benchmarks1

Benchmark

SAST/DAST Detection Rate Benchmark

Measures how accurately static and dynamic application security testing tools find real vulnerabilities, reporting true-positive, false-positive, and recall rates.

FAQs2

FAQ

How do I set up Vibgrate in GitLab CI?

Use node:22 image and run npx @vibgrate/cli scan --format sarif --out vibgrate.sarif --fail-on error. Add artifacts.reports.sast: vibgrate.sarif for S...

FAQ

What is the difference between SAST and DAST?

SAST (Static Application Security Testing) analyzes source code, bytecode, or binaries without running the application, finding flaws like injection o...