1. A method, comprising: determining selected global variables in a program for which flow of the selected global variables through the program is to be tracked, the selected global variables being less than all the global variables in the program; and using a static analysis performed on the program, tracking flow through the program for the selected global variables; in response to one or more of the selected global variables being used in security-sensitive operations in the flow, analyzing use of each one of the selected global variables in a corresponding security-sensitive operation; and in response to a determination the use may be a potential security violation, reporting the potential security violation.