Code Scanning is Not Code Security (2)