Semgrep vs Snyk head-to-head: custom-rule SAST vs a broad SCA-led developer-security platform covering code, …