April 2024
Beginner to intermediate
350 pages
10h 45m
English
This chapter will be a little different from the rest of this book. In this chapter, you will be shown how to build a docker image containing a simple web application that deploys to AWS ECS using GitHub Actions.
The testing that’s involved with this exercise includes HTML scanning, NodeJS scanning, credential scanning, and dependency scanning. In addition to static application security testing (SAST), the pipeline features the use of OWASP ZAProxy, a dynamic application security scanner. Together, these quality checks ensure the proper implementation of the Document Object Model (DOM), checking for known vulnerabilities in the code, and actively checking for security vulnerabilities in the ...
Read now
Unlock full access