CodeScan: Static code analysis and security posture management