That is pretty much my existence at $MAJOR_TECH_COMPANY now. Inexperienced security engineers running bots against my codebase and sending me pages long tickets with their "findings". There might be a couple of interesting nuggets here and there but by and large the reports are just noise. This churn is actively taking away from my ability to actually respond to customer-impacting issues because "security is always our top priority".