Which approach to code scanning do you adopt?

Which approach to code scanning do you adopt?