Snyk and Secure Code Warrior: adding more context to GitHub code scanning alerts

While Snyk provides lots of details for each of the vulnerabilities we discover, and references to published advisories and associated CWEs, not everyone is a security expert.