- Add secrets scanner
global-config(ignore-paths,only-paths,use-gitignore,ignore-generated-files,max-file-size-kb)
- Add
argumentsto IaC rule configuration
- Add
rule-configs,ignore-platforms, andonly-platformsto IaC configuration
- Add IaC scanner configuration.
- Add SCA
ignore-pathsconfiguration
- Add SAST configuration
For development, operations, and security teams overwhelmed by a growing backlog of reported security vulnerabilities, Datadog Code Security delivers runtime-based prioritization of vulnerabilities with a platform approach to remediation. A unified, end-to-end solution allows teams to focus on fixing vulnerabilities that matter, with clear visibility into remediation progress across the software development lifecycle.
- Static Code Analysis (SAST) for identifying security and quality issues in your first-party code
- Software Composition Analysis (SCA) for identifying open source dependencies in both your repositories and your services
- Runtime Code Analysis (IAST) for identifying vulnerabilities in the first-party code within your services
- Secret Scanning for identifying and validating leaked secrets
- Infrastructure as Code (IaC) Security for identifying security misconfigurations in Terraform files stored in your repositories