45 / 70 · 07 Security Testing for AI Apps · SAST, DAST, and SCA in CI: Shift-Left Security Pipeline← prev⊞ allnext →☰ Read as one page
8.1What Is Shift-Left Security?
Shift-left security means integrating security testing early in the development lifecycle -- ideally in CI/CD pipelines -- rather than waiting for a penetration test before release. For AI applications, this means running static analysis, dependency scanning, and dynamic testing on every commit, with AI-specific rules that catch vulnerabilities traditional tools miss.