EMA's Secure Coding Practices survey of 129 software development professionals found that code scanning tools were less effective than developers.