Where can I learn more about SAST, and do you have a link to your tool?

I stood up a Dokuwiki instance recently and had Qwen look through the codebase, and it didn't find anything critical. It identified "fragile patterns", though.

It's Psalm — see the section on security analysis here: https://psalm.dev/docs/security_analysis/