SAST (static application security testing)

Also written: code scanning

Scanning that reads code without running it, looking for unsafe patterns. Bandit is a SAST tool.

Where the book teaches it