possibly add flawfinder, which may replace cppcheck

https://www.dwheeler.com/flawfinder/

In recent release GitLab 10.7 they added SAST for C/C++ in Ultimate versions using flawfinder.

https://docs.gitlab.com/ee/user/project/merge_requests/sast.html#supported-languages-and-frameworks

Check if it is worth to add this, possibly replacing cppcheck.