Securing Applied Information Systems With SAST Integration Into the Gulp Pipeline

Le résumé fourni par la source

The growth of cyber threats in modern web development and the need to implement DevSecOps practices demand innovative approaches to code protection. Traditional security testing methods, applied in late stages, face significant limitations, including the inability to respond quickly to vulnerabilities and non- compliance with the "shift-left" principle. This article presents a practical approach to integrating static application security testing (SAST) tools directly into the automated build process for front-end projects using the Gulp task runner. By leveraging the ESLint linter, configured to detect dangerous constructs (such as no-eval and no-implied-eval), the proposed system provides continuous code monitoring and automatic vulnerability detection. The Gulp pipeline, implemented via the gulp-eslint-new plugin, is modified to immediately interrupt the build process (failAfterError) upon error detection. These capabilities contribute to strengthening cybersecurity capacities, serve as an effective first line of defense, and prevent obvious vulnerabilities corresponding to the OWASP Top Ten from entering the repository. Furthermore, the approach demonstrates simple implementation without the need for complex external tools. Through the integration of SAST into the Gulp pipeline, the proposed framework is well-equipped to address modern security challenges, enhancing the overall code reliability in the Node.js environment.

Ce résumé expose les affirmations des auteurs. BNTIC ne l’interprète pas comme une validation indépendante des résultats.