Which type of security testing should be performed as a part of a CI/CD pipeline by analyzing the source code itself without compiling the code into a running executable?

Which type of security testing should be performed as a part of a CI/CD pipeline by analyzing the source code itself without compiling the code into a running executable?
A. Dynamic Application Security Testing
B. Runtime Application Health-Protection
C. Continuous Application Security Testing
D. Static Analysis Security Testing