“If you are, a developer in your IDE, if you can integrate open source tools to try to detect, whether it's, whether you're running a SAST or you're running some type of open-source scanner like DependencyCheck or something like that, and if you have the ability to run some container image”

Transcript evidence from Derek Fisher -- The Application Security Handbook.