What you can’t find with a SAST tool
by SAST, I mean Static Application Security Tool.
A lot of configuration issues yes, in general, SAST tools (especially commercial ones) do provide lot of built-in checkers (rules) to find configuration related issues from source, for…