(Jordon Garrett has recently joined a startup IT company located in Chicago, Illinois, as a DevSecOps engineer. His team leader asked him to find a SAST tool that can secure the organization Azure environment. Which of the following is a SAST tool that Jordon can select to secure his organization’s Azure environment?.)

Synopsys Coverity is an enterprise Static Application Security Testing (SAST) platform with a supported Azure DevOps extension that scans source code in Azure Repos/Pipelines for security and quality defects, fulfilling the need to secure an Azure environment at build time.

B: Accurics concentrates on Infrastructure-as-Code and cloud posture management, not source-code SAST. C: Tenable.io handles host/container vulnerability management; it does not perform compile-time static code analysis. D: DevSkim is a lightweight IDE plug-in; Microsoft does not market it as a full SAST engine for Azure pipelines.

1. Synopsys Coverity Documentation, “Coverity for Azure DevOps”, Rev. 2023-07, Sec. 1.1.

2. Microsoft Azure DevOps Marketplace, “Synopsys Detect for Coverity” extension description, 2023, para. 1-3.

3. Accurics Whitepaper, “Cloud-Native Security Platform”, 2022, p. 4.

4. Tenable.io User Guide, v2023-10, “Product scope”, p. 9.

5. Microsoft DevSkim GitHub README, commit 9f8e2e, “Purpose”, lines 10-18.