https://vulert.com/blog/unpacking-sast-understanding-static-application-security-testing-in-depth/