SAST code scan

Open full demo (opens in a new tab)

Use the left and right arrow keys to move between steps. Enter acts on the highlighted area and Escape closes its tip.

Step 1 of 8: SAST code scan

SAST code scan

Open-source scanning covers the packages you pull in, not the code your team writes. SAST reads your source for flaws such as injection and unsafe deserialization, and shows exactly where they are. SAST is available, expanding. This tour uses a sample workspace, Acme Demo Corp, with test data only.

Step 1 of 8