[code-quality] New Static Analysis Security Tool