Hands-On Auto DevOps with GitLab CI - Dynamic Application Security Testing

This video tutorial covers dynamic application security testing using GitLab CI. It explains the difference between static and dynamic security testing, and demonstrates how to integrate dynamic testing into GitLab CI builds. The tutorial walks through setting up dynamic application security testing (DAST) and review jobs, executing the pipeline, and analyzing the results. It concludes with a brief introduction to the next topic on application metrics collection using Prometheus.

What is the main purpose of dynamic application security testing?

Explain the difference between static and dynamic application security testing.

How does GitLab CI facilitate dynamic testing in the build process?

Describe the process of deploying a temporary version of an application for review.

What is the significance of the JSON report generated by the dynamic application security tester?

What additional features does GitLab offer for security scanning in merge requests?

How can vulnerabilities detected in a feature branch be addressed before merging into the master branch?