SonarQube vs Semgrep head-to-head: holistic code quality plus quality gates vs fast, customizable security-first SAST - …