Semgrep - A lightweight static code analysis tool for finding bugs, vulnerabilities, and enforcing secure coding practices. https://github.com/returntocorp/semgrep