A development team is adopting a secure software development lifecycle (SDLC). The security manager wants to ensure that vulnerabilities are identified before code is executed, but also wants to minimize cost and disruption to developers.
Which of the following activities BEST meets this requirement?
A. Static application security testing (SAST)
B. Dynamic application security testing (DAST)
C. Fuzz testing
D. Penetration testing