Part4 Implementing DAST in Gitlab DevSecOps Pipeline using OWASP ZAP

Dynamic Application Security Testing (DAST) is crucial to identify vulnerabilities in running applications, ensuring real-time security validation of web applications.

1. Why We Need This Use Case

Dynamic Application Security Testing (DAST) is crucial to identify vulnerabilities in running applications, ensuring real-time security validation of web applications. Integrating OWASP ZAP into GitLab pipelines automates DAST, making it easier for developers to secure applications during deployment while reducing the risk of exploitation in production.

---

2. When We Need This Use Case

• When running security scans for web applications deployed in staging or production environments.

• When automating the detection of security vulnerabilities in CI/CD pipelines.

• To ensure compliance with security policies and standards during development.

• For projects with public-facing applications needing robust security measures.

---

3. Complete first before this usecase

Part 1 - Implementing DevSecOps Pipeline using Gitlab - Link

Part 2.1 - Implementing SAST in Gitlab DevSecOps Pipeline using SonarQube with no code coverage - Link

Part 2.2 - Implementing SAST in Gitlab DevSecOps Pipeline using SonarQube with Code Coverage - Link

Part 3 - Implementing SAS in Gitlab DevSecOps Pipeline using Synk - Link

---

4. Challenge Questions