Create vulnerability tickets for on-call engineers before SLAs lapse

Your security alerts from code scanners arrive unpredictably, causing missed vulnerable dependencies and delayed remediation. Prioritize and assign engineers with SLO due dates so triage and fixes finish before SLA lapses.