Similar Items: Longitudinal Analyses of SAST Tools: A CodeQL Case Study