GitHub finds your vulnerabilities. Something still has to manage them.

Turn on CodeQL, Dependabot, and Secret Scanning across a handful of repositories and you get exactly what the marketing promised: findings. Lots of them. Each one sitting in its own repository's Secur...