Those aren't static analyzers, they're dynamic analyzers; they only catch issues at runtime.

GCC's -fanalyze, and clang's `--analyze` both run static analyzers.