Combining SonarQube and gosec to get more information out of your source code — Static analysis (or static code analysis) is a great technique to find issues related to security, performance, coverage, coding style, and some times even logic without running your application. Usually this type of analysis is run against the source code of the application only. No execution required. This is a…