Checkmarx alternatives for a Python-heavy CI pipeline

Hey everyone! I'm looking into SAST tools for our team. We run a Python-heavy web app (Django/Flask) and our CI pipeline is in GitLab CI.

I've seen Checkmarx mentioned a lot, but it seems like a big enterprise solution. We're a smaller SaaS shop and need something that integrates smoothly without a huge learning curve. Speed in the pipeline is also a big concern for us.

What are good alternatives that work well specifically for Python? I'm curious about tools that are good at finding Python-specific issues and have clear, actionable results. Open source or commercial is fine, but budget is definitely a factor.

Any guidance from folks who've been down this road? 😅

newbie