SAST scanning