Recommended flow
FindingReceives the vulnerability with repository context.
PatchProposes the smallest possible change.
TestCreates or updates a test that demonstrates the fix.
PROpens a pull request with evidence and impact.
HumanReviews and decides on the merge.
Measure the right thing
More findings doesn't mean more security. Measure time to fix, patch acceptance rate, regressions and recurrence.
Takeaway: If the machine already finds everything, the advantage becomes how fast you fix it.
Take this playbook with you
In Markdown to paste into your AI, or as the starting point for your own playbook.