How We Swept 25 Repos for Security Issues in an Afternoon (and What We Actually Found)
A practitioner's account of running a full Dependabot and CodeQL sweep across an entire GitHub organization, fixing real vulnerabilities, and hardening a production server the same day.