Glossary: Endpoint, Application and Email Security
static code analysis
Also written: static analysis
Checking source code for weaknesses without running it, such as SQL built from strings or hardcoded passwords. It is fast and points to the exact line, but produces false positives.
Where the book teaches it
Related terms
SAST (static application security testing)BanditDAST (dynamic application security testing)false positive