Dynamic Scan:
Since we don’t have a Veracode dynamic scan license and won’t be getting one in the future (as per Rajesh), how can we perform a dynamic security scan? Can we use Burp Suite or any other tool instead?

Static Scan for SSIS:
What tools are available to perform a static code scan for SSIS packages?

^(?:\d{10}|(\()?\d{3}(?(1)\))(?:([- ])| )\d{3}(?:\2|-)\d{4})$

https://regex101.com/r/hjPF6N/2

^[a-zA-Z -&]+$

allow character, space, ampersand and hyphen