SAST and DAST Integration Strategies for Scalable CI/CD Workflows

Abstract

As the demand for faster and more secure software development increases, integrating Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) into Continuous Integration/Continuous Deployment (CI/CD) workflows has become crucial. These tools help ensure the security of applications by identifying vulnerabilities early in the software development lifecycle (SDLC). However, integrating SAST and DAST effectively into CI/CD processes presents several challenges, including performance overhead, false positives, and the scalability of security testing in large, complex environments. This paper explores integration strategies for SAST and DAST that maximize security, speed, and scalability within CI/CD workflows. By evaluating existing solutions, proposing a hybrid strategy, and testing with a case study, we provide valuable insights into optimizing security testing in automated environments.