Source code carries business rules, secrets, and dangerous API use that a scanner does not see. Source code analysis is a security-focused review (secure code review) of selected repositories and modules; it is not a promise to read every line. Code around payment, identity, authorization, and cryptography raises the need. It is used after a merger, after a vendor delivery, or before a release gate. A SAST tool dump does not replace this service; human review and tools complete each other.
TARGON ties code review to application security and pentest experience. Which repo, which branch, and which secrets must not enter the test environment are cut first; findings are written with a location and a fix a developer can close. Customer source is not leaked; repo access is least privilege. Taking source code analysis from TARGON lets you scope SAST, DAST, and pentest with the same counterpart; each item is discussed separately.