SAST is performed early in the software development lifecycle, typically when the code is being written. SAST can be integrated into the development process and CI/CD pipeline.