static-code-analysis.md

Static Code Analysis

We use the following static code analysis tools:

• golangci-lint and eslint for compile time linting.
• Snyk for dependency and image scanning (SCA).

These are at least run daily or on each pull request.