Automating Application Security with SAST and SCA