結果 : sonarqube covers both static and dynamic application security testing