Balancing developer velocity and security, what's your approach?
For teams who've been doing this a while, how do you actually handle the tension between shipping fast and catching risk before it ships? I'm interested in where you draw the line on blocking a build vs just flagging it, how you handle pushback from engineering when a scan adds friction to a release and what happens when a critical finding shows up right before a deadline.
u/AssociteExtzernal615 — 13 days ago