Now do SAST and library/dependency scanning, including open source lic nse reporting and recommendations.