菜单
Quickly triage GitHub code scanning alerts and determine whether findings are currently actionable or blocked by missing upstream fixes. Use when asked to check active code scanning issues, summarize alert counts/severity, or answer whether alerts can be fixed now.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
Validate, repair, plan, and create atomic git commits with clear Conventional Commits messages. Use when the user asks to "organize commits", "plan commits", "make atomic commits", or commit current work cleanly without pushing. Inspect diffs, run repo-appropriate checks before planning, fix validation failures, propose a confirmed commit plan, then stage and commit each group with staged-file hook checks.
Plan and create organized atomic commits with clear Conventional Commits messages. Use when the user asks to "organize commits", "plan commits", "make atomic commits", or commit current work cleanly. Analyze diffs, propose a commit plan for confirmation, run pre-commit --all-files ONCE before creating commits, then stage and commit each group without pushing.
基于 SOC 职业分类
| name | gh-code-scanning-triage |
| description | Quickly triage GitHub code scanning alerts and determine whether findings are currently actionable or blocked by missing upstream fixes. Use when asked to check active code scanning issues, summarize alert counts/severity, or answer whether alerts can be fixed now. |
Use this skill to answer code scanning status questions in under two minutes. Prioritize one-pass triage: gather open alerts, classify fixable vs no-fix-yet, then report direct next actions.
Run:
./.codex/skills/gh-code-scanning-triage/scripts/check-alerts.sh
Filter to one branch or produce JSON:
./.codex/skills/gh-code-scanning-triage/scripts/check-alerts.sh --ref refs/heads/main
./.codex/skills/gh-code-scanning-triage/scripts/check-alerts.sh --format json
actionable now and no-fix-yet counts.fixed is empty, treat as not directly remediable now.fixed has a version, treat as actionable now.actionable only when Fixed Version is non-empty.no-fix-yet when Fixed Version is empty.libc6 and libc-bin).Run only when needed:
gh api repos/<owner>/<repo>/code-scanning/alerts/<alert-number>
gh api repos/<owner>/<repo>/code-scanning/alerts/<alert-number>/instances
Use this to confirm branch/ref spread or tool metadata without redoing full CI/log analysis.
Use scripts/check-alerts.sh for fast triage output.