Vulnerability Scanning

Purpose

Automatically scan code and infrastructure for known vulnerabilities and security weaknesses.

When to Use

• Every build (CI/CD)
• Before releases
• Regular security audits
• After dependency updates

Process

1. Configure scanning tools
2. Run SAST (static analysis)
3. Run DAST (dynamic analysis)
4. Review findings
5. Prioritize and remediate