EMA’s Secure Coding Practices survey of 129 software development professionals found that code scanning tools were less effective than developers.
https://www.securitymagazine.com/articles/98845-secure-code-training-ruled-better-investment-than-code-scanning-tools