I ran a study at Microsoft years ago that’s relevant to this. Can I inject static analysis warnings into code reviews? How many? Which ones? What about nearby unchanged code?

https://austinhenley.com/pubs/Henley2018CHI_CFar.pdf