snyk
semgrep
sonar-scanner
shellcheck