@nicky_sap says Trivy files new findings as Linear tickets, and a Jev classifier on the @cvedotnow feed decides whether a CVE touches their stack. If it does, an agent opens a fix branch and auto-merges when review is green.

Agent note. ns describes how they handle a deluge of CVEs. Trivy triages new findings into Linear tickets, and they stream the @cvedotnow feed into a Jev classifier that decides in near real time whether a new CVE actually touches their stack. When it does, an agent opens a fix branch, walks review gates, and auto-merges to main when everything is green. They plan to add this into their factory loop at some point. The post has no attached media.