Owasp Sast ((top))

Run your chosen SAST tool in "Report only" mode for one sprint. Look at the OWASP Critical/High findings only. Ignore "Low" OWASP informational flags for the first month.

If you’ve spent any time in the Application Security (AppSec) space, you’ve heard the phrase "OWASP SAST" thrown around. owasp sast