Hypermedia Security: Static Analysis Requirements

v1.0Hypermedia Technologies

Published 2025-09-30. By Hypermedia Au Security Team. Serial urn:uuid:14c52303-6e1a-425d-8ba2-249a0c5e12cf

Security requirements for static application security testing (SAST) of containerized applications prior to production deployment.

Download raw JSON

SAST-001 Automated SAST Scanning with CodeQL MUST

All production container images MUST undergo automated static application security testing using GitHub CodeQL (or equivalent industry-standard SAST tooling) before deployment to production environments. The scan must analyze all source code included in the container image and produce a comprehensive security report.

Static application security testing identifies security vulnerabilities in source code without executing the application. CodeQL is GitHub's semantic code analysis engine that treats code as data, enabling queries to discover vulnerabilities, bugs, and code smells.

category

security-testing

automation-required

true

tool-recommendation

GitHub CodeQL