How to configure DAST full scans for complex web applications

1 · · Aug. 31, 2020, 12:44 p.m.
Shifting Dynamic Application Security Testing (DAST) left can help to detect security vulnerabilities earlier in the software development lifecycle (SDLC). However, testing earlier and more often in the SDLC comes with its own set of challenges: an abundance of alerts from automated security tools and a high computational cost caused by frequent and long-running CI security jobs. In this blog post, I’ll walk you through how we configured DAST for the internal pipeline that tests the GitLab web a...