Dependency security watch for one GitHub repo: checks advisory feeds twice a day, flags real hits in Slack and has cloud agents open a fix PR after you approve.