Quiz: What is Static Application Security Testing (SAST) in CI pipelines?
SAST tools (e.g. SonarQube, Bandit) scan source code for known vulnerability patterns prior to compilation.
Find tutorials, system documentation, dynamic pages, and interactive quizzes in one place.
SAST tools (e.g. SonarQube, Bandit) scan source code for known vulnerability patterns prior to compilation.
Infrastructure as Code (IaC) means managing and provisioning infrastructure through machine-readable config files (e.g. Terraform, CloudFormation).
Infrastructure as Code (IaC) enables provisioning and managing cloud infrastructure using declarative configuration files (e.g. Terraform, CloudFormation).
Flask-WTF integrates WTForms with Flask, automatically validating hidden CSRF protection tokens on submitted forms.
AWS CloudTrail logs, tracks, and retains account event activity related to API calls across AWS services.
Amazon GuardDuty analyzes CloudTrail, VPC Flow Logs, and DNS logs to detect compromised accounts or instances.
The sticky bit prevents unprivileged users from deleting or renaming other users' files in shared world-writable directories.
The GIL is a mutex in CPython that ensures only one thread executes Python bytecode at a time, protecting memory management from race conditions.