In our study, a novel SAST-LLM mashup slashed false positives by 91% compared to a widely used standalone SAST tool.
Unlike dynamic analysis techniques, SAST operates without executing the program, focusing entirely on the static codebase.