yq can be called as a module if needed. With -y/-Y, files can be edited in place like with sed -i: Because YAML treats JSON as a dialect of YAML, you can use yq to convert JSON to YAML: yq -y . < ...
Configure the SAST tool to scan the root of this directory. Identify vulnerabilities in the codebase (e.g., SQL injection, XSS, command injection, buffer overflows).