Static application security testing using Fortify SCA