Everyone is interested in DevSecOps – but is it for the right reasons? Doing shift-left a little helps a little, but understanding the true value of SAST as a preventative engineering methodology rather than an early testing tool yields the much greater result for software security, quality, and reliability.
See also
SQLi Hall-of-shame http://sqlihallofshame.com for SQL Injection
IoT Hall-of-shame http://iothallofshame.com
IoT Hall-of-shame Reddit / iothallofshame
My blog: http://codecurmudgeon.com
Twitter: @Codecurmudgeon / codecurmudgeon
Facebook: / codecurmudgeon
My photography channel: / @backsideofblue3163