Given the insane volume of AI generated code these days, I guess we need specialized AI models to scan it for vulnerabilities. Probably need to run it on your codebase periodically?
We run an agentic security test harness when attempting to merge a working branch to main. Human review of output required to merge.