This principle is baked into every decent SAST tool. Huge, successful and very competent software-based companies are using SAST in the pipeline to enforce this.