How does a code analysis tool fit with other types of security scanners?
Static code analysis is an essential aspect of an optimized DevSecOps strategy, but it is not the only tool in the toolbox. Other types of testing automation will create multiple layers of security to ensure nothing slips between the cracks and infects a live product. However, there are other products that target surrounding areas of your Salesforce environment that contribute to your overall success with data security. For instance, a policy scanner will ensure that team members have proper permissions for accessing sensitive data. These types of scanners address the concerns of Salesforce administrators while a code analysis tool helps developers.