3.1 - Static Application Security Testing

Static Application Security involves analyzing code without execution to detect vulnerabilities early. Semgrep is a tool for identifying issues like dangerous PHP functions and SQL injection in Java, and can be integrated into GitHub Actions (GHA) for continuous security checks.