https://awjunaid.com/books/static-code-analysis-tools-beyond-the-regex-with-codeql/