Static analysis security testing (SAST)