Menu
SkillsMP has collected 8 skills from yu-iskw/github-security-report-plugin. Open a skill to review its source and details.
Showing 8 of 8 collected skills.
Check GitHub CLI authentication and scopes for security alert APIs. Use when gh api security endpoints return 403/404 or before fetching Dependabot, code scanning, or secret scanning alerts.
Merge normalized envelopes from fetch-dependabot-alerts, fetch-code-scanning-alerts, and fetch-secret-scanning-alerts into one JSON summary and Markdown report. Use after fetch skills complete. Does not call gh.
List and normalize code scanning alerts (CodeQL, SARIF) for a GitHub organization or repository using gh api. Use when the user asks for code scanning, SAST, or CodeQL alerts for an org or repo.
List and normalize Dependabot alerts for a GitHub organization or repository using gh api. Use when the user asks for dependency vulnerabilities, Dependabot alerts, GHSA, or CVE data for an org or repo.
List and normalize secret scanning alerts for a GitHub organization or repository using gh api. Use when the user asks for leaked secrets, secret scanning, or token exposure for an org or repo.
Check gh auth and org access before security fetches. Use when gh returns 403/404 or before first report on an org.
Security report for one repository (all three alert types). Use when the user names owner/repo.
Full org security report (Dependabot, code scanning, secret scanning). Use when the user wants an organization security overview or open-alert summary.