結果 : scanning source code to find vulnerabilities is called