mattandrea02/agentic-dsec ? reverse-engineered prompt

Build me an experimental service that sits after SonarQube and helps with security fixes.

I want to send it a finished Sonar analysis for an exact commit, and have it queue the run, use an LLM to review the findings, then generate a human readable report and a candidate patch if it can suggest one. By default it should not push anything anywhere, just save reviewable artifacts like a report and patch file. It should also support a mode where it creates a GitHub issue, and another mode where it can open a pull request, but never merge anything automatically.

Please make it runnable with Docker Compose, with a simple API and a worker, plus a health check. It should use a durable local queue or storage so runs survive restarts. Keep SonarQube and the model provider external, and make the configuration easy to set through environment variables. If you need current docs for any library, look them up online.