How did you get product management to agree to that? Ours said "I could fix all of that in 2 days with Claude." They are still not fixed. Granted, our PMs suck.
The upper management and security team came knocking and told us all of the CVEs from the scanner need to be addressed right now. And the only way to deploy without having to wait for QA approval is to not merge feature changes.
> The upper management and security team came knocking
i would say the recent slew of vuln reports/breaches making the news rounds are doing work!
This is the silver lining i suppose!
You need a better product management. If they can't see what's going on at the moment, they truly suck at their job or management is putting pressure.