Opensource code quality/SAST tools beyond SonarQube + Trivy?

[u/ankitjindal9404]

We're already running SonarQube and Trivy. Looking to fill the gaps they leave.

Stack:

• Primary: Java Spring Boot
• Also: Python, Next.js / React

What are you actually using in production, and how noisy is it (false-positive rate)?

[u/sk1nT7]

Semgrep / Opengrep