Static code analysis – manual scan versus automatic scan