Quiz: What is Static Application Security Testing (SAST) in CI pipelines?
SAST tools (e.g. SonarQube, Bandit) scan source code for known vulnerability patterns prior to compilation.
Find tutorials, system documentation, dynamic pages, and interactive quizzes in one place.
SAST tools (e.g. SonarQube, Bandit) scan source code for known vulnerability patterns prior to compilation.
Preview Environments provision short-lived instances for testing pull requests in isolation.
DAST tools test active running applications against security vulnerabilities (e.g. OWASP ZAP).
Build Triggers initiate automated pipeline workflows upon repository changes.
The Control Plane consists of API server, etcd datastore, scheduler, and controller manager.
Namespaces provide scope isolation for Pods, Services, and Deployments within a shared physical cluster.
StatefulSets provide unique network identifiers and ordered deployment guarantees for stateful workloads.
Node Affinity directs pod scheduling to specific node subsets matching label criteria.