SAST using checkmarx