Scan code for vulnerabilities with multi-tool SAST and CI/CD integration.
Run app security scans, track remediation, and integrate SBOM/SARIF into CI.