CI/CD pipeline for Avaya IVR applications deployed on IBM WAS

[avc875638460410]

Hello,

We are implementing a CI/CD pipeline for Avaya IVR applications deployed on IBM WebSphere Application Server and would like to integrate security scanning as part of the pipeline.

We are looking for guidance and best practices on:

• Recommended security scanning tools for WebSphere-based IVR applications (SAST / DAST / SCA / dependency scanning)
• How to integrate security scans into a CI/CD pipeline (e.g., Gitlab)
• Scanning EAR/WAR packages generated from IVR applications
• Any Avaya or IBM WebSphere–specific considerations or limitations

If anyone has experience implementing security scanning for Avaya IVR apps on WebSphere, sample scripts, tool recommendations, or reference implementations would be very helpful.

Thank you in advance.