Why does the municipal CI include a static-analysis job before Docker build and promote of the Webex ChatOps service?
Select an answer to reveal the explanation.
Short Explanation
Inspect the blueprints before the building ships—static analysis fails on known patterns while the code is still in CI, not after users trip over it in production logs.
Full Explanation
A CI static-analysis job reads source or bytecode and fails on named bug or security patterns before Docker build and promote. That shift-left benefit differs from finding the same issue in production logs and from OWASP mitigation how-tos in the application itself. The task is not a SAST-vendor admin exam or an exploit walkthrough.