A client added a SAST scanner to their CI pipeline after a compliance audit. Six months later, nobody looked at the findings. Then a real SQL injection shipped to production.
- Published On
ci
Tags
consulting (94)architecture (41)debugging (39)developer-experience (28)reliability (23)devops (17)ai (13)code-quality (12)performance (11)databases (10)security (9)observability (9)microservices (6)postgres (6)engineering-culture (6)technical-debt (6)database (6)infrastructure (5)postgresql (5)kubernetes (5)api-design (4)ci-cd (4)testing (4)productivity (4)distributed-systems (3)nodejs (3)dependencies (3)javascript (3)tooling (3)typescript (2)migration (2)on-call (2)refactoring (2)configuration (2)resilience (2)cost-optimization (2)code-review (2)deployment (2)opentelemetry (2)monitoring (2)goals (2)ci (1)data-modeling (1)disaster-recovery (1)developer-tooling (1)build-systems (1)elasticsearch (1)github-actions (1)data-integrity (1)retention (1)authentication (1)node.js (1)data (1)websockets (1)project-management (1)mcp (1)finops (1)multi-tenant (1)authorization (1)terraform (1)dns (1)opinion (1)memory (1)error-handling (1)secrets-management (1)webhooks (1)containers (1)environments (1)queues (1)cloud (1)orm (1)alerting (1)incident-management (1)caching (1)platform-engineering (1)feature-flags (1)api (1)contracts (1)logging (1)mongodb (1)workflow (1)nestjs (1)angular (1)sandbox (1)sonarcube (1)learning (1)journey (1)mdx (1)