A Google Summer of Code project: creating a benchmarking framework for SAST
… There are many possible ways in which a downstream pipeline can be triggered: source code changes applied to an analyzer, configuration changes applied to an analyzer, or scheduled pipeline invocation. …