TL;DR - use CodeRabbit's defensive AI agents to run a deep-scan of your repo, identify and fix vulnerabilities for free until Nov 8th.
alternatively, build your own and don't pay a rent seeking, middleman tax
we did this and got better reviews without per-user pricing gates for the review features we need, this is the kind of company that is facing the Saaspocolypse