GitHub · Capability

GitHub Security Operations

Unified workflow for security operations combining code scanning, Dependabot, and secret scanning. Used by security engineers for vulnerability management, dependency auditing, and secret leak remediation.

Run with Naftiko GitHubSecurityCode ScanningDependabotSecret ScanningVulnerability Management

What You Can Do

GET
Listcodescanningalertsforrepository — List code scanning alerts
/v1/repositories/{owner}/{repo}/code-scanning/alerts
GET
Getcodescanningalert — Get a code scanning alert
/v1/repositories/{owner}/{repo}/code-scanning/alerts/{alert_number}
PATCH
Updatecodescanningalert — Update a code scanning alert
/v1/repositories/{owner}/{repo}/code-scanning/alerts/{alert_number}
GET
Listcodescanninganalysesforrepository — List analyses
/v1/repositories/{owner}/{repo}/code-scanning/analyses
GET
Listdependabotalertsforrepository — List Dependabot alerts
/v1/repositories/{owner}/{repo}/dependabot/alerts
GET
Getdependabotalert — Get a Dependabot alert
/v1/repositories/{owner}/{repo}/dependabot/alerts/{alert_number}
PATCH
Updatedependabotalert — Update a Dependabot alert
/v1/repositories/{owner}/{repo}/dependabot/alerts/{alert_number}
GET
Listsecretscanningalertsforrepository — List secret scanning alerts
/v1/repositories/{owner}/{repo}/secret-scanning/alerts
GET
Getsecretscanningalert — Get a secret scanning alert
/v1/repositories/{owner}/{repo}/secret-scanning/alerts/{alert_number}
PATCH
Updatesecretscanningalert — Update a secret scanning alert
/v1/repositories/{owner}/{repo}/secret-scanning/alerts/{alert_number}
GET
Checkifvulnerabilityalertsareenabledforrepository — Check vulnerability alert status
/v1/repositories/{owner}/{repo}/vulnerability-alerts
PUT
Enablevulnerabilityalerts — Enable vulnerability alerts
/v1/repositories/{owner}/{repo}/vulnerability-alerts

MCP Tools

list-code-scanning-alerts

List code scanning alerts for a repository

read-only
get-code-scanning-alert

Get a code scanning alert

read-only
update-code-scanning-alert

Update a code scanning alert (dismiss, reopen)

idempotent
list-code-scanning-analyses

List code scanning analyses

read-only
get-code-scanning-analysis

Get a code scanning analysis

read-only
upload-sarif

Upload SARIF analysis data

get-default-setup

Get code scanning default setup configuration

read-only
update-default-setup

Update code scanning default setup

idempotent
list-dependabot-alerts

List Dependabot alerts

read-only
get-dependabot-alert

Get a Dependabot alert

read-only
update-dependabot-alert

Update a Dependabot alert (dismiss, reopen)

idempotent
list-dependabot-secrets

List Dependabot secrets

read-only
list-secret-scanning-alerts

List secret scanning alerts

read-only
get-secret-scanning-alert

Get a secret scanning alert

read-only
update-secret-scanning-alert

Update a secret scanning alert (resolve, reopen)

idempotent
list-secret-scanning-locations

List locations for a secret scanning alert

read-only
check-vulnerability-alerts

Check if vulnerability alerts are enabled

read-only
enable-vulnerability-alerts

Enable vulnerability alerts

disable-vulnerability-alerts

Disable vulnerability alerts

APIs Used

github-security