---
title: "Discussion on \"How I Built a Deliberately Vulnerable Banking App to Demonstrate Automated Security Scanning with Semgrep and Jenkins\" | Hashnode"
description: "Discussion on \"How I Built a Deliberately Vulnerable Banking App to Demonstrate Automated Security Scanning with Semgrep and Jenkins\". Most developers I've worked with believe their code is secure because their tests pass. I used to think the same. This post is about proving that belief wrong — with a working demo anyone can run them"
url: "https://hashnode.com/posts/how-i-built-a-deliberately-vulnerable-banking-app-to-demonstrate-automated-security-scanning-with-semgrep-and-jenkins/69b14cf5054d52d14a96e63a"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [How I Built a Deliberately Vulnerable Banking App to Demonstrate Automated Security Scanning with Semgrep and Jenkins](https://blog.prakyath.dev/how-i-built-a-deliberately-vulnerable-banking-app-to-demonstrate-automated-security-scanning-with-semgrep-and-jenkins?utm_source=hashnode&utm_medium=feed)

Most developers I've worked with believe their code is secure because their tests pass. I used to think the same. This post is about proving that belief wrong — with a working demo anyone can run them

Mar 11 · 15 min read · blog.prakyath.dev  
Read the article

## Written by

[Prakyath Reddy](https://hashnode.com/@prakyath)

@prakyath

  
[View profile](https://hashnode.com/@prakyath)

DevOps Engineer

## Responses

Markdown supported · ⌘↵ to post

No responses yet.