security-action

Auto-detect top maintainers for each repo in an org and set the maintainers custom property via the GitHub API. Use when the user wants to populate or update maintainer metadata.

Validate metadata fields (author, source, category) in opengrep/semgrep YAML rule files. Use when the user wants to lint or check rule quality.

Clean up stale security-action Slack messages based on review signals (reactions, label removal, resolved threads). Use when the user wants to clean old notifications from a Slack channel.

Delete Slack messages from a channel filtered by bot username and repository names. Use when the user wants to bulk-delete bot messages for specific repos.

Auto-dismiss Dependabot alerts matching configurable hotwords (e.g. DoS) or a GHSA/CVE dismiss list. Use when the user wants to bulk-dismiss low-priority Dependabot alerts.

Scan org repos for open Dependabot alerts at or above a severity threshold and build notification messages for maintainers. Use when the user wants to check or nudge about Dependabot vulnerabilities.

Fetch and parse a JSON config file from a GitHub repository. Use when the user wants to read a configuration file from a remote repo.

List all repositories in a GitHub org with their maintainers custom property. Use when the user wants to see who maintains each repo.

Fetch custom properties for a GitHub repository. Use when the user wants to inspect repo metadata like runtime, maintainers, or other custom properties.

Match a list of changed file paths against a CODEOWNERS file to determine code ownership. Use when the user wants to find who owns specific files or directories.

Compare opengrep scan findings between current and base branch rules to detect new/removed findings. Use when the user wants to evaluate the impact of rule changes.

Check all repos in a GitHub org for Renovate config compliance (must extend the shared org config). Use when the user wants to audit Renovate adoption.

Send a message to a Slack channel with markdown support, colored attachments, and deduplication. Use when the user wants to post notifications or alerts to Slack.