analyses and tests include—
u Static Analysis: Also referred to as “code review,” static analysis analyses
source code before it is compiled, to detect coding errors, insecure
coding constructs, and other indicators of security vulnerabilities or