Static application security testing using Semgrep for finding vulnerabilities, code smells, and enforcing security policies across codebases.