--- title: "Discussion on \"How to Catch Security Vulnerabilities in Code Before They Reach Your Pull Requests\" | Hashnode" description: "Discussion on \"How to Catch Security Vulnerabilities in Code Before They Reach Your Pull Requests\". Security reviews are most effective when developers receive feedback while the code is still fresh in their minds. Waiting until a pull request, CI build, or penetration test to find exposed credentia" url: "https://hashnode.com/posts/catch-security-vulnerabilities-code-pull-requests/6aa873c5c1f02b411d54db2f" --- [Feed](https://hashnode.com/feed) / Discussion # [How to Catch Security Vulnerabilities in Code Before They Reach Your Pull Requests](https://freecodecamp.org/news/catch-security-vulnerabilities-code-pull-requests?utm_source=hashnode&utm_medium=feed) Security reviews are most effective when developers receive feedback while the code is still fresh in their minds. Waiting until a pull request, CI build, or penetration test to find exposed credentia Sep 14 · 9 min read · freecodecamp.org Read the article - [#security](https://hashnode.com/tag/security) - [#devsecops](https://hashnode.com/tag/devsecops) - [#git](https://hashnode.com/tag/git) - [#sast](https://hashnode.com/tag/sast) - [#software-development](https://hashnode.com/tag/software-development) ## Written by [Umair Mirza](https://hashnode.com/@umairmirza) @umairmirza · Islamabad, Pakistan [View profile](https://hashnode.com/@umairmirza) Cloud Security and IAM Architect Security-focused software engineer working at the intersection of cybersecurity, cloud, software development, and AI. With a background spanning infrastructure, identity, security operations, and application development, I enjoy building practical solutions that improve security, automation, and visibility. I’m particularly interested in cloud and AI security, Microsoft 365, identity, security automation, and using software engineering to solve real-world security challenges. ## Responses Markdown supported · ⌘↵ to post No responses yet.