Reduce duplicate alert noise

Treat duplicate alerts as one remediation effort

Alert fatigue often comes from the same vulnerable package appearing across many repositories. Campaign grouping lets teams plan one fix strategy and then track the affected alerts to completion.

Tune grouping signals

Useful grouping signals include package, ecosystem, advisory identifiers, patched version, owner, repository family, and due date. Review campaigns that are too broad or too narrow.

Report both views

Security leaders need campaign-level progress, while auditors often need alert-level evidence. Keep both views available so noise reduction does not remove accountability.