Static analysers are a good start here, but so often their rules can be overcome configuration tricks. AI is seemingly really good here on that. Be interested

Static analysers are a good start here, but so often their rules can be overcome configuration tricks. AI is seemingly really good here on that. Be interested to watch how it performs on the more weird and uncommon security cases.