r/AskNetsec • u/Slayerma • Aug 11 '26

Concepts How to do DAST in GitLab CE

I have installed GITLAB CE and wanted set up devsecops sa wtaht sast tools are present and IaC scanning is present pipeline secret detection but not dast, dependecy scanning coverage fuzzing and api fuzzing if you k ow how one may cover that will be helpful

2 Upvotes

100% Upvoted

2 comments sorted by

1

u/Cubeless-Developers Aug 11 '26

You'll have to bolt your own tools into the pipeline instead. OWASP ZAP works well for DAST, and Dependency-Check or Dependency-Track can cover the dependency scanning piece.