Ironically, such tools already exist, and most (all?) large software companies use them routinely on all the code that they ship.