How open source projects use static code analysis tools in continuous integration pipelines