Which code scanning approach do you adopt?

Which code scanning approach do you adopt?