SDLC, customer, compliance requirements, how does your organization or teams decided what projects (code) go through static analysis?
Like