The steps to run Static Application Security Testing (SAST) using Azure Pipeline

We are going to use Azure DevOps Demo Generator to generate a project to run Static Application Security Testing (SAST) to get detailed information on security vulnerabilities and suggested fixes for quick remediation.

1. Navigate to DevOps Demo Generator to select the WhiteSource Bolt template.

You can navigate to the created project repos and choose the Readme file to read more about the project.

1. Navigate to pipelines to edit it
2. Choose the agent we need to use Ubuntu latest or any of ubuntu agents.
3. Select NPM Install.
4. Make sure it has the install command so it could set up the NPM.

1. Select Maven
2. Make sure to assign the pom.xml destination
3. Select WhiteSource and leave it to the default values but basically, you should select the Repo/App you want to scan

1. Click Save & queue
2. Navigate to the pipelines after the build is done and select the WhihteSource CI
3. Select MendBolt This is the risk vulnerability and it has 3 types High-Medium-Low and we have HIGH which means our application is not secure at all Select Security Vulnerabilities Here you can find the fix you should be doing to avoid this vulnerability risk

Also, you can check License risks.