SAST reads your code without ever running it

Explains data-flow (taint) analysis, walks a Semgrep example, and names SAST's real limitations.