[halostatue]

Do you read the source code of the static code analysis tool to make sure that it’s not hiding some obvious backdoors?

[rufflez]

I look at the outcome, and can certainly say that the tools I use find issues than I didn't know existed