Investigate usage of Confluent's parallel consumer
Confluent has published a wrapper around Kafka's Consumer/Producer API that enables parallel processing of messages, and supports batching and retries: https://github.com/confluentinc/parallel-consumer
parallel-consumer can be used alongside Kafka Streams in the same application. It can be hooked into vert.x (which ships with Quarkus) to perform I/O operations.
Based on what I've seen so far, parallel-consumer may be a good fit for vulnerability analysis and repo meta analysis.
When it comes to the supported ordering guarantees, I think key-based ordering should suffice. These ordering guarantees are something that Quarkus' reactive messaging implementation is currently missing, see https://github.com/DependencyTrack/hyades/issues/215#issuecomment-1377347537
Relates to #215
parallel-consumer was adopted in API server and notification-publisher.