Which statement best describes the purpose of static application security testing?

A. analyzing source or binary code without running the program B. asking users for opinions C. testing only in production D. observing live network traffic only