Find-then-patch only works if you can fix the bugs quicker than you’re creating new ones.
Some orgs will be able to do this, some won’t.
"Find me vulnerabilities in this PR."
"Find me vulnerabilities in this PR."