weaknesses that are detectable at the source code level. Static analyses
can be manual or automated. In a manual analysis, the reviewer
inspects the source code without the assistance of tools. In an
automated analysis, a tool (or tools) is used to scan the code to locate