Static application security testing using checkmarx