Semgrep combines static analysis and LLMs to ensure that both security teams and developers only deal with real security issues.