So you dont use automation like sonarcube / qualys and other tools ?

Our corp requires this at a minimum to even be deployed to development. Let alone staging / prod