#12DELIVERYSCAN
Code Scan (SAST)
Static security analysis
Medium
Overview
Automated scanning for security vulnerabilities in code before it's merged. Catches SQL injection, XSS, and common bugs.
Why It Matters
Find security issues before they ship. Catches SQL injection, XSS, and common vulnerabilities.
Implementation Pattern
- 1Choose scanning tools
- 2Integrate with CI
- 3Configure scan rules
- 4Set up automated PR comments
Tool Examples
These are examples, not endorsements. Choose what fits your context.
Dependencies
Requires (must have first)
Enhanced by (more effective with)
Enables (unlocks)
Same Phase
Other capabilities in this pipeline phase