Security Vulnerability Report

Query GitHub for Dependabot alerts, code scanning results, and secret scanning findings across repositories to produce a prioritized vulnerability report.

Instructions

Phase 1: Dependabot Alerts (GitHub Agent)

1. Fetch Dependabot alerts across all configured repositories:
   • Alert severity (critical, high, medium, low)
   • Affected package and vulnerable version range
   • Patched version available (yes/no)
   • CVE identifier and CVSS score
   • Ecosystem (npm, pip, go, etc.)
   • Alert state (open, dismissed, fixed)