A SAST that uses semantic grep rules written in YAML to find static security code defects.