You can install the latest version of the extension via the Visual Studio Marketplace.
Configure the SAST tool to scan the root of this directory. Identify vulnerabilities in the codebase (e.g., SQL injection, XSS, command injection, buffer overflows).