Quick Answer
Security checks in CI/CD: SAST (static analysis - scan source code for vulnerabilities), dependency scanning (check for known vulnerable packages - OWASP dependency check, Snyk), container image scanning (Trivy, Clair - check base images and layers for CVEs), secret detection (prevent committing credentials to repo). Run as pipeline stages, fail build on critical findings.
Answer
Static code analysis (SAST). Dependency scanning for vulnerabilities. DevSecOps integrates continuous security into the CI/CD pipeline.
S
SugharaIQ Editorial Team
Verified Answer
This answer has been peer-reviewed by industry experts holding senior engineering roles to ensure technical accuracy and relevance for modern interview standards.
