SAS 2021 workshop: Company-wide SAST

Static Application Security Testing (SAST) is an important part of the software development cycle, especially when it comes to application security. During SAS 2021, Aleksei Meshcheriakov and Evgenii Protsenko shared their experience of implementing SAST techniques at Yandex, a Russian IT company known for its services and applications. What tools to use, how to improve the analysis quality, how to write rules to automate processes – these questions and many others are covered in the “Company-wide SAST” workshop.