Dawn is a cybersecurity analyst who works in a security operations center. Part of her duties involve routinely scanning for vulnerabilities in the organization's infrastructure. She was recently tasked with analyzing code for a web application that will be implemented soon on the organization's web servers. Dawn needs to review the code using a variety of methods, but more importantly, she needs to know about the security issues that might occur while the code is executing. Which of the following would be the best method for achieving this?