A DevOps team must select a method for the CI/CD pipeline with these characteristics: Ensure security throughout their CI/CD pipeline production Provide security for the testing environment. Discover

SAST (Static Application Security Testing) analyzes source code without executing the application, thus it cannot discover runtime-related issues or environmental problems.

Unit testing focuses on verifying the functionality of individual code components and is not primarily a security testing method designed to find security vulnerabilities or runtime environmental issues.

DAST (Dynamic Application Security Testing) actively scans the running application, simulating attacks from the outside, making it ideal for finding runtime-related issues, environmental issues (like misconfigurations), and vulnerabilities that only manifest when the application is executed and interacted with.

Static code analysis is another name for SAST, which analyzes code without execution, therefore it cannot discover runtime or environmental issues.