semgrep Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.