Some embedded systems places do this, even ones that are not safety-critical. It's more common as the level of concern rises. Medical instruments, for example, aren't MISRA, but at least some of them run static analyzers on C/C++ code. (All should...)