I just turned on copilot reviews so I think they will start on new pushes to PRs. Let's see how it goes.

Do we need to adjust it's prompt to get what we want

Yeah we can. So far it seems pretty good.

Can it look at the library CVE issues and triage them based on exposure? 🤔

I'm not sure but I am hoping to update many of the libraries for osquery 6 and hopefully that will address most of the CVEs.