Turn on CodeQL, Dependabot, and Secret Scanning across a handful of repositories and you get exactly what the marketing promised: findings. Lots of them. Each one sitting in its own repository's Security tab, behind its own set of tabs and filters, with no shared notion of who owns this , when ...
Source: [Dev.to](https://dev.to/shahidfoy/github-finds-your-vulnerabilities-something-still-has-to-manage-them-3noh)