Nearly all of the major security-focus static tools have CI integration, and guidance on best practices for integration.