Create developer security tickets for project leads before next sprint

Your security alerts arrive untriaged, letting vulnerabilities linger and delaying releases. Project leads get prioritized remediation tasks so fixes are scheduled before the next sprint.