One of the goals of automating security in CI/CD is to save time and let the machines do the routine work. This presentation will show the evolution of how the SAS Institute integrated ZAP automation into their development pipeline, how to determine when a product is required to have a DAST scan, and what a scan with results looks like in their environment.
The panelists are:
⚡️ Allison Ashley, Senior Software Development Engineer @ SAS Institute
⚡️ Matt Fiely, Associate Software Development Engineer @ SAS Institute
⚡️ Bernie Mamorbor, Manager Development Testing @ SAS Institute