Open code-scanning (SAST) alert

What it is

GitHub code scanning has an open alert — a static-analysis finding in your own source that has not been triaged.

Why it matters

These are findings in code you wrote and control, so they are the most fixable class you have. Open alerts also tend to accumulate until the list is long enough that nobody opens it.

How to fix it

Triage each alert: fix it, or dismiss it with a reason so the queue reflects real work. Keeping the list near zero is what makes a new alert noticeable.