Create the virtual environment via bazel run //:ide_support. If your IDE does not automatically ask you to activate the newly created environment you can activate it.
Unlike dynamic analysis techniques, SAST operates without executing the program, focusing entirely on the static codebase.