Static application security testing

PDS requires an enterprise-grade platform for Static Application Security Testing (SAST) and Software Composition Analysis (SCA), which is essential for maintaining secure and compliant software across a complex policing environment. By embedding the software into Azure DevOps pipelines, we can enforce consistent security and code quality gates at build time, ensuring vulnerabilities, code smells, and dependency risks are identified early and remediated before deployment. This aligns directly with NCSC secure development principles and supports defensible audit and compliance requirements. Additionally, the software's deep support for multiple languages and frameworks allows us to standardise scanning across diverse services