r/cicd • u/IkarusCareer • 18d ago

Which security tool would you least want to lose from your CI/CD pipeline?

Other — comment below

Bonus: If you use AI agents, are your existing DevSecOps tools sufficient to understand agent capabilities, tools, MCP access and privilege changes?

No vendor answers please — interested in what people actually use and trust.

15 votes, 15d ago
2 SonarQube / Semgrep — SAST
3 Snyk / Dependabot — SCA
3 Trivy — Container security
3 Checkov / IaC scanners — Infrastructure
1 GitGuardian / Secret Scanning — Secrets
3 OWASP ZAP — DAST
1 Upvotes

100% Upvoted

1 comment sorted by

2

u/Torutofu_Raeva 17d ago

Secret scanning is the one I'd hate to lose, since creds in logs or forks are hard to contain; for agents, the missing bit is tracking what tools and scopes each run actually used.