My company uses mostly Java and TypeScript. However, it’s a good starting point to proof the technology on JVM languages and see how it’s adopted by the team, how many false-positives is generates, etc. With all automated tools the biggest issues usually are false-positives.