Discover vulnerabilities across a codebase with semantic code analysis engine