Results 2 comments of Q

> I think some of these aren't actually as big a deal as they seem but there are some low hanging fruit and we shouldn't have blank security for this...

Hmmm, I didn't realize github did this. Maybe I'll try to mirror in gitlab to leverage their SAST.