SAST scan on plugins

Hi, 

our client requires plugins to be installed on Appian to pass a SAST static code scan before they can be used.

Does anyone know if Appian scans plugins during deployment and in that case how is this done? Is there a way to perform a SAST scan on the plugins after deployment?

Thanks in advance