{"id":6,"date":"2026-08-12T07:48:48","date_gmt":"2026-08-12T07:48:48","guid":{"rendered":"http:\/\/corpolearn.wp\/cybsec\/\/getting-started-with-devsecops-integrating-sast-dast-into-github-actions\/"},"modified":"2026-08-12T07:48:48","modified_gmt":"2026-08-12T07:48:48","slug":"getting-started-with-devsecops-integrating-sast-dast-into-github-actions","status":"publish","type":"post","link":"https:\/\/corpolearn.com\/cybsec\/getting-started-with-devsecops-integrating-sast-dast-into-github-actions\/","title":{"rendered":"Getting Started with DevSecOps: Integrating SAST\/DAST into GitHub Actions"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Shifting security left requires embedding Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Dependency Vulnerability Scanning into automated CI\/CD pipelines.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Production GitHub Actions Workflow Snippet<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>name: Security Scan Pipeline\non: [push, pull_request]\n\njobs:\n  sast_scan:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions\/checkout@v4\n      - name: Run Semgrep SAST\n        uses: returntocorp\/semgrep-action@v1\n        with:\n          config: p\/ci<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>Shifting security left requires embedding Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Dependency Vulnerability Scanning into automated CI\/CD pipelines. Production GitHub Actions Workflow Snippet<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_cl_workflow_state":"","_cl_content_brief":"","_cl_target_topic":"","footnotes":""},"categories":[11],"tags":[],"class_list":["post-6","post","type-post","status-publish","format-standard","hentry","category-devsecops-appsec"],"_links":{"self":[{"href":"https:\/\/corpolearn.com\/cybsec\/wp-json\/wp\/v2\/posts\/6","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/corpolearn.com\/cybsec\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/corpolearn.com\/cybsec\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/corpolearn.com\/cybsec\/wp-json\/wp\/v2\/comments?post=6"}],"version-history":[{"count":0,"href":"https:\/\/corpolearn.com\/cybsec\/wp-json\/wp\/v2\/posts\/6\/revisions"}],"wp:attachment":[{"href":"https:\/\/corpolearn.com\/cybsec\/wp-json\/wp\/v2\/media?parent=6"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/corpolearn.com\/cybsec\/wp-json\/wp\/v2\/categories?post=6"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/corpolearn.com\/cybsec\/wp-json\/wp\/v2\/tags?post=6"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}