We are now regularly using Coverity to scan the source tree.