Lesson 2 — Security Tooling and Findings

Topics

• Understand what SAST can and cannot catch
• Understand what DAST can and cannot catch
• Understand dependency scanning output
• Turn findings into actionable fix lists
• Use review checklists during security review
• Convert security findings into regression tests
• Communicate threat models to reviewers and teammates

This lesson is finished