you can also use a local cross-platform static analysis tool like : https://github.com/xfhg/intercept

If you fancy regex ofc, but needs no changes into your codebase or internet access from your pipeline.