---
title: "Discussion on \"SAST vs SCA: why your CI pipeline needs both\" | Hashnode"
description: "Discussion on \"SAST vs SCA: why your CI pipeline needs both\". When security teams talk about \"scanning\" code in CI/CD, they usually mean one of two very different things: scanning the code you wrote (SAST) or scanning the open-source code you imported (SCA). Bot"
url: "https://hashnode.com/posts/sast-vs-sca-ci-pipeline-security-testing/6aa25189ea9c34fd737641cc"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [SAST vs SCA: why your CI pipeline needs both](https://depwarden.hashnode.dev/sast-vs-sca-ci-pipeline-security-testing?utm_source=hashnode&utm_medium=feed)

When security teams talk about "scanning" code in CI/CD, they usually mean one of two very different things: scanning the code you wrote (SAST) or scanning the open-source code you imported (SCA). Bot

Sep 10 · 5 min read · depwarden.hashnode.dev  
Read the article

-   [#sast](https://hashnode.com/tag/sast)
-   [#security](https://hashnode.com/tag/security)
-   [#devsecops](https://hashnode.com/tag/devsecops)

## Written by

[Rushabh Shah](https://hashnode.com/@rushabh5000)

@rushabh5000 · Mumbai, India

  
[View profile](https://hashnode.com/@rushabh5000)

## Responses

Markdown supported · ⌘↵ to post

No responses yet.