How to setup "Static Code Analyse" in Dynatrace SaaS

[jannick_deturck]

We have dynatrace SaaS with DPS license.

Our developers are making use of AzureDevOps to build, deploy, ... their code in AzureDevOps

In the documentation I found this link: Secure development controls — Dynatrace Docs
My question: How to start with SAST in dynatrace?  So how can we enable SAST in AzureDevOps pipelines?

[jannick_deturck]

So can we use Dynatrace for:

• SAST scanning (Static Application Security Testing)
• Secret scanning
• Security scans in IDE

[sujit_k_singh · Accepted solution]

Hello @jannick_deturck 

I think I’m a bit late here, but to clarify: Dynatrace does not offer native SAST scanning within Azure DevOps pipelines. Although Dynatrace’s internal SDLC includes daily static code analysis, there is no user-facing SAST tool or extension available for build-time scans in your pipelines.