github-search vs Trail of Bits Software Assurance (2026)