static security scanner