github-agent 1.1.1__tar.gz → 1.2.0__tar.gz

{github_agent-1.1.1 → github_agent-1.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: github-agent
-Version: 1.1.1
+Version: 1.2.0
 Summary: GitHub Agent for MCP
 Author-email: Audel Rouhi <knucklessg1@gmail.com>
 License: MIT
@@ -48,7 +48,7 @@ Dynamic: license-file
 ![PyPI - Wheel](https://img.shields.io/pypi/wheel/github-agent)
 ![PyPI - Implementation](https://img.shields.io/pypi/implementation/github-agent)
 
-*Version: 1.1.1*
+*Version: 1.2.0*
 
 > **Documentation** — Installation, deployment, and usage across the MCP, API, and
 > CLI interfaces, including the integrated A2A agent server, are maintained in the
@@ -98,6 +98,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `github_collaborators` | `COLLABORATORTOOL` | Manage repository collaborators. |
 | `github_commits` | `COMMITTOOL` | Manage GitHub commits. |
 | `github_contents` | `CONTENTTOOL` | Manage GitHub contents. |
+| `github_dependabot` | `DEPENDABOTTOOL` | Review and manage GitHub Dependabot vulnerability alerts. |
 | `github_discover_graphql_schema` | `GRAPHQLTOOL` | Discover the live GitHub GraphQL schema (types, fields, and attributes) in real-time. |
 | `github_graphql` | `GRAPHQLTOOL` | Execute raw GraphQL queries and mutations natively on GitHub. |
 | `github_ingest_repos` | `INGESTTOOL` | Natively ingest GitHub repositories into epistemic-graph as typed :Repository nodes. |
@@ -111,7 +112,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 #### Verbose 1:1 API-mapped tools (`MCP_TOOL_MODE=verbose` or `both`)
 
 <details>
-<summary>72 per-operation tools — one per public API method (click to expand)</summary>
+<summary>76 per-operation tools — one per public API method (click to expand)</summary>
 
 | MCP Tool | Toggle Env Var | Description |
 |----------|----------------|-------------|
@@ -144,8 +145,11 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `github_get_commit` | `APITOOL` | Get a single commit in a repository. |
 | `github_get_commits` | `APITOOL` | List commits for a repository. |
 | `github_get_contents` | `APITOOL` | Get contents of a file or directory in a repository. |
+| `github_get_dependabot_alert` | `APITOOL` | Get a single Dependabot alert. |
+| `github_get_dependabot_alerts` | `APITOOL` | List Dependabot alerts for a repository. |
 | `github_get_issue` | `APITOOL` | Get a single issue in a repository. |
 | `github_get_issues` | `APITOOL` | List issues for a repository. |
+| `github_get_org_dependabot_alerts` | `APITOOL` | List Dependabot alerts for an entire organization. |
 | `github_get_org_members` | `APITOOL` | List members for an organization. |
 | `github_get_org_repos` | `APITOOL` | List repositories for an organization. |
 | `github_get_org_teams` | `APITOOL` | List teams for an organization. |
@@ -181,6 +185,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `github_trigger_workflow_dispatch` | `APITOOL` | Trigger a workflow dispatch event. |
 | `github_update_branch_protection` | `APITOOL` | Update branch protection configuration. |
 | `github_update_content` | `APITOOL` | Update a file in a repository. |
+| `github_update_dependabot_alert` | `APITOOL` | Update the state of a Dependabot alert. |
 | `github_update_issue` | `APITOOL` | Update an issue in a repository. |
 | `github_update_organization` | `APITOOL` | Update an organization's profile and member settings. |
 | `github_update_pages` | `APITOOL` | Update the GitHub Pages configuration for a repository. |
@@ -190,7 +195,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 
 </details>
 
-_14 action-routed tool(s) (default) · 72 verbose 1:1 tool(s). Each is enabled unless its `<DOMAIN>TOOL` toggle is set false; `MCP_TOOL_MODE` selects the surface (`condensed` default · `verbose` 1:1 · `both`). Auto-generated — do not edit._
+_15 action-routed tool(s) (default) · 76 verbose 1:1 tool(s). Each is enabled unless its `<DOMAIN>TOOL` toggle is set false; `MCP_TOOL_MODE` selects the surface (`condensed` default · `verbose` 1:1 · `both`). Auto-generated — do not edit._
 <!-- MCP-TOOLS-TABLE:END -->
 
 Detailed tool schemas, parameter shapes, and validation constraints are preserved in [docs/mcp.md](docs/mcp.md).
@@ -245,6 +250,7 @@ When query strings or parameters are supplied, an LLM-free **Knowledge Graph res
         "COLLABORATORTOOL": "True",
         "COMMITTOOL": "True",
         "CONTENTTOOL": "True",
+        "DEPENDABOTTOOL": "True",
         "GITHUB_ALLOW_DESTRUCTIVE": "False",
         "GITHUB_HTTP_CONNECT_TIMEOUT": "10",
         "GITHUB_HTTP_READ_TIMEOUT": "30",
@@ -291,6 +297,7 @@ When query strings or parameters are supplied, an LLM-free **Knowledge Graph res
         "COLLABORATORTOOL": "True",
         "COMMITTOOL": "True",
         "CONTENTTOOL": "True",
+        "DEPENDABOTTOOL": "True",
         "GITHUB_ALLOW_DESTRUCTIVE": "False",
         "GITHUB_HTTP_CONNECT_TIMEOUT": "10",
         "GITHUB_HTTP_READ_TIMEOUT": "30",
@@ -338,6 +345,7 @@ docker run -d \
   -e COLLABORATORTOOL=True \
   -e COMMITTOOL=True \
   -e CONTENTTOOL=True \
+  -e DEPENDABOTTOOL=True \
   -e GITHUB_ALLOW_DESTRUCTIVE=False \
   -e GITHUB_HTTP_CONNECT_TIMEOUT=10 \
   -e GITHUB_HTTP_READ_TIMEOUT=30 \
@@ -408,6 +416,7 @@ consumed from a **remote deployment**. The
 | `COLLABORATORTOOL` | `True` |  |
 | `COMMITTOOL` | `True` |  |
 | `CONTENTTOOL` | `True` |  |
+| `DEPENDABOTTOOL` | `True` |  |
 | `GRAPHQLTOOL` | `True` |  |
 | `INGESTTOOL` | `True` |  |
 | `ISSUETOOL` | `True` |  |
@@ -434,7 +443,7 @@ consumed from a **remote deployment**. The
 | `MODEL_ID` | `gpt-4o` | Model id for the agent |
 | `ENABLE_WEB_UI` | `True` | Serve the AG-UI web interface |
 
-_33 package + 12 inherited variable(s). Auto-generated from `.env.example` + the shared agent-utilities set — do not edit._
+_34 package + 12 inherited variable(s). Auto-generated from `.env.example` + the shared agent-utilities set — do not edit._
 <!-- ENV-VARS-TABLE:END -->
 
 

{github_agent-1.1.1 → github_agent-1.2.0}/README.md

@@ -20,7 +20,7 @@
 ![PyPI - Wheel](https://img.shields.io/pypi/wheel/github-agent)
 ![PyPI - Implementation](https://img.shields.io/pypi/implementation/github-agent)
 
-*Version: 1.1.1*
+*Version: 1.2.0*
 
 > **Documentation** — Installation, deployment, and usage across the MCP, API, and
 > CLI interfaces, including the integrated A2A agent server, are maintained in the
@@ -70,6 +70,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `github_collaborators` | `COLLABORATORTOOL` | Manage repository collaborators. |
 | `github_commits` | `COMMITTOOL` | Manage GitHub commits. |
 | `github_contents` | `CONTENTTOOL` | Manage GitHub contents. |
+| `github_dependabot` | `DEPENDABOTTOOL` | Review and manage GitHub Dependabot vulnerability alerts. |
 | `github_discover_graphql_schema` | `GRAPHQLTOOL` | Discover the live GitHub GraphQL schema (types, fields, and attributes) in real-time. |
 | `github_graphql` | `GRAPHQLTOOL` | Execute raw GraphQL queries and mutations natively on GitHub. |
 | `github_ingest_repos` | `INGESTTOOL` | Natively ingest GitHub repositories into epistemic-graph as typed :Repository nodes. |
@@ -83,7 +84,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 #### Verbose 1:1 API-mapped tools (`MCP_TOOL_MODE=verbose` or `both`)
 
 <details>
-<summary>72 per-operation tools — one per public API method (click to expand)</summary>
+<summary>76 per-operation tools — one per public API method (click to expand)</summary>
 
 | MCP Tool | Toggle Env Var | Description |
 |----------|----------------|-------------|
@@ -116,8 +117,11 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `github_get_commit` | `APITOOL` | Get a single commit in a repository. |
 | `github_get_commits` | `APITOOL` | List commits for a repository. |
 | `github_get_contents` | `APITOOL` | Get contents of a file or directory in a repository. |
+| `github_get_dependabot_alert` | `APITOOL` | Get a single Dependabot alert. |
+| `github_get_dependabot_alerts` | `APITOOL` | List Dependabot alerts for a repository. |
 | `github_get_issue` | `APITOOL` | Get a single issue in a repository. |
 | `github_get_issues` | `APITOOL` | List issues for a repository. |
+| `github_get_org_dependabot_alerts` | `APITOOL` | List Dependabot alerts for an entire organization. |
 | `github_get_org_members` | `APITOOL` | List members for an organization. |
 | `github_get_org_repos` | `APITOOL` | List repositories for an organization. |
 | `github_get_org_teams` | `APITOOL` | List teams for an organization. |
@@ -153,6 +157,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `github_trigger_workflow_dispatch` | `APITOOL` | Trigger a workflow dispatch event. |
 | `github_update_branch_protection` | `APITOOL` | Update branch protection configuration. |
 | `github_update_content` | `APITOOL` | Update a file in a repository. |
+| `github_update_dependabot_alert` | `APITOOL` | Update the state of a Dependabot alert. |
 | `github_update_issue` | `APITOOL` | Update an issue in a repository. |
 | `github_update_organization` | `APITOOL` | Update an organization's profile and member settings. |
 | `github_update_pages` | `APITOOL` | Update the GitHub Pages configuration for a repository. |
@@ -162,7 +167,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 
 </details>
 
-_14 action-routed tool(s) (default) · 72 verbose 1:1 tool(s). Each is enabled unless its `<DOMAIN>TOOL` toggle is set false; `MCP_TOOL_MODE` selects the surface (`condensed` default · `verbose` 1:1 · `both`). Auto-generated — do not edit._
+_15 action-routed tool(s) (default) · 76 verbose 1:1 tool(s). Each is enabled unless its `<DOMAIN>TOOL` toggle is set false; `MCP_TOOL_MODE` selects the surface (`condensed` default · `verbose` 1:1 · `both`). Auto-generated — do not edit._
 <!-- MCP-TOOLS-TABLE:END -->
 
 Detailed tool schemas, parameter shapes, and validation constraints are preserved in [docs/mcp.md](docs/mcp.md).
@@ -217,6 +222,7 @@ When query strings or parameters are supplied, an LLM-free **Knowledge Graph res
         "COLLABORATORTOOL": "True",
         "COMMITTOOL": "True",
         "CONTENTTOOL": "True",
+        "DEPENDABOTTOOL": "True",
         "GITHUB_ALLOW_DESTRUCTIVE": "False",
         "GITHUB_HTTP_CONNECT_TIMEOUT": "10",
         "GITHUB_HTTP_READ_TIMEOUT": "30",
@@ -263,6 +269,7 @@ When query strings or parameters are supplied, an LLM-free **Knowledge Graph res
         "COLLABORATORTOOL": "True",
         "COMMITTOOL": "True",
         "CONTENTTOOL": "True",
+        "DEPENDABOTTOOL": "True",
         "GITHUB_ALLOW_DESTRUCTIVE": "False",
         "GITHUB_HTTP_CONNECT_TIMEOUT": "10",
         "GITHUB_HTTP_READ_TIMEOUT": "30",
@@ -310,6 +317,7 @@ docker run -d \
   -e COLLABORATORTOOL=True \
   -e COMMITTOOL=True \
   -e CONTENTTOOL=True \
+  -e DEPENDABOTTOOL=True \
   -e GITHUB_ALLOW_DESTRUCTIVE=False \
   -e GITHUB_HTTP_CONNECT_TIMEOUT=10 \
   -e GITHUB_HTTP_READ_TIMEOUT=30 \
@@ -380,6 +388,7 @@ consumed from a **remote deployment**. The
 | `COLLABORATORTOOL` | `True` |  |
 | `COMMITTOOL` | `True` |  |
 | `CONTENTTOOL` | `True` |  |
+| `DEPENDABOTTOOL` | `True` |  |
 | `GRAPHQLTOOL` | `True` |  |
 | `INGESTTOOL` | `True` |  |
 | `ISSUETOOL` | `True` |  |
@@ -406,7 +415,7 @@ consumed from a **remote deployment**. The
 | `MODEL_ID` | `gpt-4o` | Model id for the agent |
 | `ENABLE_WEB_UI` | `True` | Serve the AG-UI web interface |
 
-_33 package + 12 inherited variable(s). Auto-generated from `.env.example` + the shared agent-utilities set — do not edit._
+_34 package + 12 inherited variable(s). Auto-generated from `.env.example` + the shared agent-utilities set — do not edit._
 <!-- ENV-VARS-TABLE:END -->
 
 

{github_agent-1.1.1 → github_agent-1.2.0}/github_agent/agent_server.py

@@ -4,7 +4,7 @@ import os
 import sys
 import warnings
 
-__version__ = "1.1.1"
+__version__ = "1.2.0"
 
 logging.basicConfig(
     level=logging.INFO,

github_agent-1.2.0/github_agent/api/api_client_dependabot.py

@@ -0,0 +1,98 @@
+#!/usr/bin/env python
+from typing import Any
+
+from agent_utilities.decorators import require_auth
+
+from github_agent.api.api_client_base import BaseApiClient
+from github_agent.github_response_models import Response
+
+
+class Api(BaseApiClient):
+    @require_auth
+    def get_dependabot_alerts(self, owner: str, repo: str, **filters) -> Response:
+        """List Dependabot alerts for a repository.
+
+        GET /repos/{owner}/{repo}/dependabot/alerts. Optional filters passed
+        straight through as query parameters (state, severity, ecosystem,
+        package, scope, sort, direction, per_page, page). Returns the raw JSON
+        list of alerts in ``Response.data``.
+        """
+        params = {k: v for k, v in filters.items() if v is not None}
+        response = self._session.get(
+            url=f"{self.url}/repos/{owner}/{repo}/dependabot/alerts",
+            params=params or None,
+            headers=self.headers,
+            verify=self.verify,
+            proxies=self.proxies,
+        )
+        response.raise_for_status()
+        return Response(response=response, data=response.json())
+
+    @require_auth
+    def get_dependabot_alert(
+        self, owner: str, repo: str, alert_number: int
+    ) -> Response:
+        """Get a single Dependabot alert.
+
+        GET /repos/{owner}/{repo}/dependabot/alerts/{alert_number}.
+        """
+        response = self._session.get(
+            url=(f"{self.url}/repos/{owner}/{repo}/dependabot/alerts/{alert_number}"),
+            headers=self.headers,
+            verify=self.verify,
+            proxies=self.proxies,
+        )
+        response.raise_for_status()
+        return Response(response=response, data=response.json())
+
+    @require_auth
+    def get_org_dependabot_alerts(self, org: str, **filters) -> Response:
+        """List Dependabot alerts for an entire organization.
+
+        GET /orgs/{org}/dependabot/alerts. Optional filters passed straight
+        through as query parameters (state, severity, ecosystem, package,
+        scope, sort, direction, per_page, page). Returns the raw JSON list of
+        alerts in ``Response.data``.
+        """
+        params = {k: v for k, v in filters.items() if v is not None}
+        response = self._session.get(
+            url=f"{self.url}/orgs/{org}/dependabot/alerts",
+            params=params or None,
+            headers=self.headers,
+            verify=self.verify,
+            proxies=self.proxies,
+        )
+        response.raise_for_status()
+        return Response(response=response, data=response.json())
+
+    @require_auth
+    def update_dependabot_alert(
+        self,
+        owner: str,
+        repo: str,
+        alert_number: int,
+        state: str,
+        dismissed_reason: str | None = None,
+        dismissed_comment: str | None = None,
+    ) -> Response:
+        """Update the state of a Dependabot alert.
+
+        PATCH /repos/{owner}/{repo}/dependabot/alerts/{alert_number}. ``state``
+        is ``dismissed`` or ``open``. ``dismissed_reason`` is required when
+        dismissing (one of ``fix_started``, ``inaccurate``, ``no_bandwidth``,
+        ``not_used``, ``tolerable_risk``); ``dismissed_comment`` is optional.
+        """
+        payload: dict[str, Any] = {"state": state}
+        if dismissed_reason is not None:
+            payload["dismissed_reason"] = dismissed_reason
+        if dismissed_comment is not None:
+            payload["dismissed_comment"] = dismissed_comment
+        response = self._session.patch(
+            url=(f"{self.url}/repos/{owner}/{repo}/dependabot/alerts/{alert_number}"),
+            json=payload,
+            headers=self.headers,
+            verify=self.verify,
+            proxies=self.proxies,
+        )
+        response.raise_for_status()
+        return Response(response=response, data=response.json())

{github_agent-1.1.1 → github_agent-1.2.0}/github_agent/api_client.py

@@ -3,6 +3,7 @@ from github_agent.api.api_client_base import logger  # noqa: F401
 from github_agent.api.api_client_branches import Api as BranchesApi
 from github_agent.api.api_client_commits import Api as CommitsApi
 from github_agent.api.api_client_contents import Api as ContentsApi
+from github_agent.api.api_client_dependabot import Api as DependabotApi
 from github_agent.api.api_client_issues import Api as IssuesApi
 from github_agent.api.api_client_orgs import Api as OrgsApi
 from github_agent.api.api_client_pages import Api as PagesApi
@@ -39,6 +40,7 @@ class Api(
     BranchesApi,
     CommitsApi,
     ContentsApi,
+    DependabotApi,
     IssuesApi,
     OrgsApi,
     PagesApi,

{github_agent-1.1.1 → github_agent-1.2.0}/github_agent/mcp/__init__.py

@@ -9,6 +9,7 @@ from github_agent.mcp.mcp_branch import register_branch_tools
 from github_agent.mcp.mcp_collaborator import register_collaborator_tools
 from github_agent.mcp.mcp_commit import register_commit_tools
 from github_agent.mcp.mcp_content import register_content_tools
+from github_agent.mcp.mcp_dependabot import register_dependabot_tools
 from github_agent.mcp.mcp_issue import register_issue_tools
 from github_agent.mcp.mcp_org import register_org_tools
 from github_agent.mcp.mcp_pull import register_pull_tools
@@ -22,6 +23,7 @@ __all__ = [
     "register_collaborator_tools",
     "register_commit_tools",
     "register_content_tools",
+    "register_dependabot_tools",
     "register_issue_tools",
     "register_org_tools",
     "register_pull_tools",

github_agent-1.2.0/github_agent/mcp/mcp_dependabot.py

@@ -0,0 +1,172 @@
+"""MCP tools for Dependabot alert operations.
+
+Auto-generated from mcp_server.py during ecosystem standardization.
+"""
+
+from agent_utilities.mcp_utilities import resolve_action, run_blocking
+from fastmcp import Context, FastMCP
+from fastmcp.dependencies import Depends
+from pydantic import Field
+
+from github_agent.auth import allow_destructive_default, get_client
+
+#: Dependabot actions gated behind allow_destructive / GITHUB_ALLOW_DESTRUCTIVE.
+DESTRUCTIVE_DEPENDABOT_ACTIONS = {"update"}
+
+#: Valid Dependabot actions for the shared ``resolve_action`` discovery helper.
+DEPENDABOT_ACTIONS = ("list", "get", "list_org", "update")
+
+
+def register_dependabot_tools(mcp: FastMCP):
+    @mcp.tool(tags={"dependabot"})
+    async def github_dependabot(
+        action: str = Field(
+            description="Action to perform. Must be one of: 'list', 'get', 'list_org', 'update'"
+        ),
+        params_json: str = Field(
+            default="{}", description="JSON string of parameters to pass to the action."
+        ),
+        allow_destructive: bool = Field(
+            default=False,
+            description="Confirm a guarded write ('update' — dismiss/reopen an alert). Also honoured via GITHUB_ALLOW_DESTRUCTIVE.",
+        ),
+        client=Depends(get_client),
+        ctx: Context | None = Field(
+            default=None, description="MCP context for progress reporting"
+        ),
+    ) -> dict:
+        """Review and manage GitHub Dependabot vulnerability alerts.
+
+        Actions (parameters via params_json):
+        - 'list': {"owner", "repo", plus optional filters: state
+          (open/dismissed/fixed/auto_dismissed), severity
+          (low/medium/high/critical), ecosystem, package, scope
+          (development/runtime), sort, direction, per_page} — list a repo's
+          Dependabot alerts (GET /repos/{owner}/{repo}/dependabot/alerts).
+        - 'get': {"owner", "repo", "alert_number"} — a single alert.
+        - 'list_org': {"org", plus the same optional filters} — every
+          Dependabot alert across an organization
+          (GET /orgs/{org}/dependabot/alerts).
+        - 'update': {"owner", "repo", "alert_number", "state":
+          "dismissed"|"open", plus "dismissed_reason" (required to dismiss:
+          fix_started/inaccurate/no_bandwidth/not_used/tolerable_risk) and
+          optional "dismissed_comment"} — dismiss or reopen an alert. Guarded
+          by allow_destructive / GITHUB_ALLOW_DESTRUCTIVE.
+        """
+        if ctx:
+            await ctx.info("Executing github_dependabot action...")
+        import json
+
+        try:
+            kwargs = json.loads(params_json)
+        except Exception as e:
+            return {"status": 400, "error": f"Invalid params_json: {e}", "data": None}
+
+        kwargs = {k: v for k, v in kwargs.items() if v is not None}
+
+        resolved = resolve_action(action, DEPENDABOT_ACTIONS, service="github-agent")
+        if isinstance(resolved, dict):
+            return resolved
+        action = resolved
+
+        if action in DESTRUCTIVE_DEPENDABOT_ACTIONS and not (
+            allow_destructive is True or allow_destructive_default()
+        ):
+            return {
+                "status": 403,
+                "error": (
+                    f"Action '{action}' is a guarded write and blocked by default. "
+                    "Re-run with allow_destructive=true (or set "
+                    "GITHUB_ALLOW_DESTRUCTIVE=True) to confirm."
+                ),
+                "data": None,
+            }
+
+        try:
+            if action == "list":
+                owner = kwargs.pop("owner", None)
+                repo = kwargs.pop("repo", None)
+                if not owner or not repo:
+                    return {
+                        "status": 400,
+                        "error": "Missing 'owner' or 'repo' parameter",
+                        "data": None,
+                    }
+                response = await run_blocking(
+                    client.get_dependabot_alerts, owner=owner, repo=repo, **kwargs
+                )
+                return {
+                    "status": 200,
+                    "message": "Dependabot alerts retrieved successfully",
+                    "data": response.data,
+                }
+            elif action == "get":
+                owner = kwargs.get("owner")
+                repo = kwargs.get("repo")
+                alert_number = kwargs.get("alert_number")
+                if not owner or not repo or not alert_number:
+                    return {
+                        "status": 400,
+                        "error": "Missing 'owner', 'repo', or 'alert_number' parameter",
+                        "data": None,
+                    }
+                response = await run_blocking(
+                    client.get_dependabot_alert,
+                    owner=owner,
+                    repo=repo,
+                    alert_number=int(alert_number),
+                )
+                return {
+                    "status": 200,
+                    "message": "Dependabot alert retrieved successfully",
+                    "data": response.data,
+                }
+            elif action == "list_org":
+                org = kwargs.pop("org", None)
+                if not org:
+                    return {
+                        "status": 400,
+                        "error": "Missing required 'org' parameter",
+                        "data": None,
+                    }
+                response = await run_blocking(
+                    client.get_org_dependabot_alerts, org=org, **kwargs
+                )
+                return {
+                    "status": 200,
+                    "message": "Organization Dependabot alerts retrieved successfully",
+                    "data": response.data,
+                }
+            elif action == "update":
+                owner = kwargs.get("owner")
+                repo = kwargs.get("repo")
+                alert_number = kwargs.get("alert_number")
+                state = kwargs.get("state")
+                if not owner or not repo or not alert_number or not state:
+                    return {
+                        "status": 400,
+                        "error": "Missing 'owner', 'repo', 'alert_number', or 'state' parameter",
+                        "data": None,
+                    }
+                response = await run_blocking(
+                    client.update_dependabot_alert,
+                    owner=owner,
+                    repo=repo,
+                    alert_number=int(alert_number),
+                    state=state,
+                    dismissed_reason=kwargs.get("dismissed_reason"),
+                    dismissed_comment=kwargs.get("dismissed_comment"),
+                )
+                return {
+                    "status": 200,
+                    "message": "Dependabot alert updated successfully",
+                    "data": response.data,
+                }
+            else:
+                return {
+                    "status": 400,
+                    "error": f"Unknown action: {action}",
+                    "data": None,
+                }
+        except Exception as e:
+            return {"status": 500, "error": str(e), "data": None}

{github_agent-1.1.1 → github_agent-1.2.0}/github_agent/mcp_server.py

@@ -54,6 +54,9 @@ DESTRUCTIVE_REPO_ACTIONS = {"pages_delete", "secrets_delete"}
 #: Pull actions gated behind allow_destructive / GITHUB_ALLOW_DESTRUCTIVE.
 DESTRUCTIVE_PULL_ACTIONS = {"merge", "enable_auto_merge"}
 
+#: Dependabot actions gated behind allow_destructive / GITHUB_ALLOW_DESTRUCTIVE.
+DESTRUCTIVE_DEPENDABOT_ACTIONS = {"update"}
+
 #: Exact keys dropped by _slim (pure hypermedia/noise, never semantic data).
 _SLIM_DROP_EXACT = {"_links", "url", "node_id"}
 
@@ -127,6 +130,7 @@ WORKFLOW_ACTIONS = (
     "delete_run",
 )
 RELEASE_ACTIONS = ("list", "get", "create", "update", "delete")
+DEPENDABOT_ACTIONS = ("list", "get", "list_org", "update")
 
 
 def _slim(obj: Any) -> Any:
@@ -2118,6 +2122,161 @@ def register_release_tools(mcp: FastMCP):
             return {"status": 500, "error": str(e), "data": None}
 
 
+def register_dependabot_tools(mcp: FastMCP):
+    @mcp.tool(tags={"dependabot"})
+    async def github_dependabot(
+        action: str = Field(
+            description="Action to perform. Must be one of: 'list', 'get', 'list_org', 'update'"
+        ),
+        params_json: str = Field(
+            default="{}", description="JSON string of parameters to pass to the action."
+        ),
+        allow_destructive: bool = Field(
+            default=False,
+            description="Confirm a guarded write ('update' — dismiss/reopen an alert). Also honoured via GITHUB_ALLOW_DESTRUCTIVE.",
+        ),
+        client=Depends(get_client),
+        ctx: Context | None = Field(
+            default=None, description="MCP context for progress reporting"
+        ),
+    ) -> dict:
+        """Review and manage GitHub Dependabot vulnerability alerts.
+
+        Actions (parameters via params_json):
+        - 'list': {"owner", "repo", plus optional filters: state
+          (open/dismissed/fixed/auto_dismissed), severity
+          (low/medium/high/critical), ecosystem, package, scope
+          (development/runtime), sort, direction, per_page} — list a repo's
+          Dependabot alerts (GET /repos/{owner}/{repo}/dependabot/alerts).
+        - 'get': {"owner", "repo", "alert_number"} — a single alert.
+        - 'list_org': {"org", plus the same optional filters} — every
+          Dependabot alert across an organization
+          (GET /orgs/{org}/dependabot/alerts).
+        - 'update': {"owner", "repo", "alert_number", "state":
+          "dismissed"|"open", plus "dismissed_reason" (required to dismiss:
+          fix_started/inaccurate/no_bandwidth/not_used/tolerable_risk) and
+          optional "dismissed_comment"} — dismiss or reopen an alert. Guarded
+          by allow_destructive / GITHUB_ALLOW_DESTRUCTIVE.
+        """
+        if ctx:
+            await ctx.info("Executing github_dependabot action...")
+        import json
+
+        try:
+            kwargs = json.loads(params_json)
+        except Exception as e:
+            return {"status": 400, "error": f"Invalid params_json: {e}", "data": None}
+
+        kwargs = {k: v for k, v in kwargs.items() if v is not None}
+
+        resolved = resolve_action(action, DEPENDABOT_ACTIONS, service="github-agent")
+        if isinstance(resolved, dict):
+            return resolved
+        action = resolved
+
+        if action in DESTRUCTIVE_DEPENDABOT_ACTIONS and not (
+            allow_destructive is True or allow_destructive_default()
+        ):
+            return {
+                "status": 403,
+                "error": (
+                    f"Action '{action}' is a guarded write and blocked by default. "
+                    "Re-run with allow_destructive=true (or set "
+                    "GITHUB_ALLOW_DESTRUCTIVE=True) to confirm."
+                ),
+                "data": None,
+            }
+
+        try:
+            if action == "list":
+                owner = kwargs.pop("owner", None)
+                repo = kwargs.pop("repo", None)
+                if not owner or not repo:
+                    return {
+                        "status": 400,
+                        "error": "Missing 'owner' or 'repo' parameter",
+                        "data": None,
+                    }
+                response = await run_blocking(
+                    client.get_dependabot_alerts, owner=owner, repo=repo, **kwargs
+                )
+                return {
+                    "status": 200,
+                    "message": "Dependabot alerts retrieved successfully",
+                    "data": response.data,
+                }
+            elif action == "get":
+                owner = kwargs.get("owner")
+                repo = kwargs.get("repo")
+                alert_number = kwargs.get("alert_number")
+                if not owner or not repo or not alert_number:
+                    return {
+                        "status": 400,
+                        "error": "Missing 'owner', 'repo', or 'alert_number' parameter",
+                        "data": None,
+                    }
+                response = await run_blocking(
+                    client.get_dependabot_alert,
+                    owner=owner,
+                    repo=repo,
+                    alert_number=int(alert_number),
+                )
+                return {
+                    "status": 200,
+                    "message": "Dependabot alert retrieved successfully",
+                    "data": response.data,
+                }
+            elif action == "list_org":
+                org = kwargs.pop("org", None)
+                if not org:
+                    return {
+                        "status": 400,
+                        "error": "Missing required 'org' parameter",
+                        "data": None,
+                    }
+                response = await run_blocking(
+                    client.get_org_dependabot_alerts, org=org, **kwargs
+                )
+                return {
+                    "status": 200,
+                    "message": "Organization Dependabot alerts retrieved successfully",
+                    "data": response.data,
+                }
+            elif action == "update":
+                owner = kwargs.get("owner")
+                repo = kwargs.get("repo")
+                alert_number = kwargs.get("alert_number")
+                state = kwargs.get("state")
+                if not owner or not repo or not alert_number or not state:
+                    return {
+                        "status": 400,
+                        "error": "Missing 'owner', 'repo', 'alert_number', or 'state' parameter",
+                        "data": None,
+                    }
+                response = await run_blocking(
+                    client.update_dependabot_alert,
+                    owner=owner,
+                    repo=repo,
+                    alert_number=int(alert_number),
+                    state=state,
+                    dismissed_reason=kwargs.get("dismissed_reason"),
+                    dismissed_comment=kwargs.get("dismissed_comment"),
+                )
+                return {
+                    "status": 200,
+                    "message": "Dependabot alert updated successfully",
+                    "data": response.data,
+                }
+            else:
+                return {
+                    "status": 400,
+                    "error": f"Unknown action: {action}",
+                    "data": None,
+                }
+        except Exception as e:
+            return {"status": 500, "error": str(e), "data": None}
+
+
 def register_ingest_tools(mcp: FastMCP):
     @mcp.tool(tags={"kg"})
     async def github_ingest_repos(
@@ -2253,6 +2412,7 @@ TOOL_REGISTRY = [
     ("collaborators", "COLLABORATORTOOL", register_collaborator_tools),
     ("actions", "ACTIONTOOL", register_action_tools),
     ("releases", "RELEASETOOL", register_release_tools),
+    ("dependabot", "DEPENDABOTTOOL", register_dependabot_tools),
     ("ingest", "INGESTTOOL", register_ingest_tools),
     ("graphql", "GRAPHQLTOOL", register_graphql_tools),
 ]

github_agent-1.2.0/github_agent/skills/github-dependabot-review/SKILL.md

@@ -0,0 +1,103 @@
+---
+name: github-dependabot-review
+skill_type: skill
+description: >-
+  Review GitHub Dependabot vulnerability alerts for a single repository or an entire
+  organization via the github-agent MCP server — list alerts (filter by severity, state,
+  ecosystem, package, scope), drill into a single alert, and dismiss or reopen an alert with
+  explicit confirmation. Use when the agent must audit dependency vulnerabilities, triage
+  security alerts across an org/repo, or dismiss a known-acceptable alert. Do NOT use for code
+  scanning / secret scanning alerts (not covered here), to gate a PR's merge on CI
+  (github-actions-ci-review), or to open remediation issues (github-issue-tracking).
+license: MIT
+tags: [github, dependabot, security, vulnerabilities, alerts, dependencies, mcp]
+metadata:
+  author: Genius
+  version: '0.1.0'
+---
+# GitHub Dependabot Review
+
+Domain-typed review of **GitHub Dependabot** vulnerability alerts via the github-agent MCP
+server, scoped to a single **repository** or an entire **organization**. Surfaces open (and
+dismissed/fixed) dependency alerts, drills into a single alert, and dismisses or reopens an
+alert. Prefer this condensed tool over raw REST.
+
+## When to use
+- Audit a **repo's** Dependabot alerts, optionally filtered to `severity=critical` or
+  `state=open`.
+- Sweep every alert across an **org** in one endpoint (`list_org`).
+- Read the full detail of one alert (advisory, affected package, fixed version).
+- Dismiss an alert that is a known-acceptable risk, or reopen a previously dismissed one.
+
+## When NOT to use
+- Reviewing **CI / workflow** health → `github-actions-ci-review`.
+- Gating one PR's merge → `github-pull-request-review`.
+- Filing a remediation ticket from an alert → `github-issue-tracking`.
+- Code-scanning or secret-scanning alerts — those are separate GitHub surfaces not covered by
+  this tool.
+
+## Prerequisites & environment
+Connect via the `mcp-client` skill against the **`github-agent`** MCP server.
+
+| Variable | Required | Notes |
+|----------|----------|-------|
+| `GITHUB_TOKEN` | ✅ | Token with `security_events` (or `repo`) scope; org read for `list_org` |
+| `GITHUB_URL` | optional | API base (default `https://api.github.com`; set for GHES) |
+| `GITHUB_VERIFY` | optional | TLS verification toggle |
+| `GITHUB_ALLOW_DESTRUCTIVE` | optional | Set `True` to allow `update` (dismiss/reopen) without per-call `allow_destructive` |
+
+`MCP_TOOL_MODE` (`condensed`|`verbose`|`both`) selects the condensed surface (below).
+
+## Tools & actions
+Prefer the **condensed** tool; it takes `action` + a `params_json` **JSON string**.
+
+| Condensed tool | Actions |
+|----------------|---------|
+| `github_dependabot` | `list`, `get`, `list_org`, `update` |
+
+### Key parameters
+- `list`: `owner` + `repo`, plus optional `state` (`open`/`dismissed`/`fixed`/`auto_dismissed`),
+  `severity` (`low`/`medium`/`high`/`critical`), `ecosystem`, `package`, `scope`
+  (`development`/`runtime`), `sort`, `direction`, `per_page`.
+- `get`: `owner` + `repo` + `alert_number`.
+- `list_org`: `org`, plus the same optional filters — one org-wide endpoint.
+- `update`: `owner` + `repo` + `alert_number` + `state` (`dismissed`|`open`). To dismiss you
+  MUST supply `dismissed_reason` (`fix_started`/`inaccurate`/`no_bandwidth`/`not_used`/
+  `tolerable_risk`); `dismissed_comment` is optional. Guarded — pass `allow_destructive=true`
+  (or set `GITHUB_ALLOW_DESTRUCTIVE=True`).
+
+## Recipes (`params_json`)
+Open critical alerts for a repo:
+```json
+{"owner":"acme","repo":"api","state":"open","severity":"critical","per_page":50}
+```
+Every open alert across an org:
+```json
+{"org":"acme","state":"open","per_page":100}
+```
+One alert's full detail:
+```json
+{"owner":"acme","repo":"api","alert_number":42}
+```
+Dismiss an alert as a tolerable risk (needs `allow_destructive=true`):
+```json
+{"owner":"acme","repo":"api","alert_number":42,"state":"dismissed","dismissed_reason":"tolerable_risk","dismissed_comment":"Not reachable from a public entrypoint."}
+```
+Reopen a previously dismissed alert:
+```json
+{"owner":"acme","repo":"api","alert_number":42,"state":"open"}
+```
+
+## Gotchas
+- `params_json` is a **string** of JSON, not an object — serialize it.
+- `update` is a **guarded write**: it returns `403` unless `allow_destructive=true` or
+  `GITHUB_ALLOW_DESTRUCTIVE=True`. Confirm with the user before dismissing.
+- Dismissing **requires** a `dismissed_reason` from GitHub's fixed set; a missing/invalid
+  reason is rejected by the API.
+- `alert_number` is the per-repo alert number (from the alert URL / list item), not a global id.
+- `list` / `list_org` default to a single page — pass `per_page` (max 100) for wider sweeps.
+
+## Related
+- **CI health:** `github-actions-ci-review`.
+- **Filing remediation issues:** `github-issue-tracking`.
+- **KG mapping:** alerts relate to `:Repository` nodes via `github_agent.kg_ingest`.

{github_agent-1.1.1 → github_agent-1.2.0}/github_agent.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: github-agent
-Version: 1.1.1
+Version: 1.2.0
 Summary: GitHub Agent for MCP
 Author-email: Audel Rouhi <knucklessg1@gmail.com>
 License: MIT
@@ -48,7 +48,7 @@ Dynamic: license-file
 ![PyPI - Wheel](https://img.shields.io/pypi/wheel/github-agent)
 ![PyPI - Implementation](https://img.shields.io/pypi/implementation/github-agent)
 
-*Version: 1.1.1*
+*Version: 1.2.0*
 
 > **Documentation** — Installation, deployment, and usage across the MCP, API, and
 > CLI interfaces, including the integrated A2A agent server, are maintained in the
@@ -98,6 +98,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `github_collaborators` | `COLLABORATORTOOL` | Manage repository collaborators. |
 | `github_commits` | `COMMITTOOL` | Manage GitHub commits. |
 | `github_contents` | `CONTENTTOOL` | Manage GitHub contents. |
+| `github_dependabot` | `DEPENDABOTTOOL` | Review and manage GitHub Dependabot vulnerability alerts. |
 | `github_discover_graphql_schema` | `GRAPHQLTOOL` | Discover the live GitHub GraphQL schema (types, fields, and attributes) in real-time. |
 | `github_graphql` | `GRAPHQLTOOL` | Execute raw GraphQL queries and mutations natively on GitHub. |
 | `github_ingest_repos` | `INGESTTOOL` | Natively ingest GitHub repositories into epistemic-graph as typed :Repository nodes. |
@@ -111,7 +112,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 #### Verbose 1:1 API-mapped tools (`MCP_TOOL_MODE=verbose` or `both`)
 
 <details>
-<summary>72 per-operation tools — one per public API method (click to expand)</summary>
+<summary>76 per-operation tools — one per public API method (click to expand)</summary>
 
 | MCP Tool | Toggle Env Var | Description |
 |----------|----------------|-------------|
@@ -144,8 +145,11 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `github_get_commit` | `APITOOL` | Get a single commit in a repository. |
 | `github_get_commits` | `APITOOL` | List commits for a repository. |
 | `github_get_contents` | `APITOOL` | Get contents of a file or directory in a repository. |
+| `github_get_dependabot_alert` | `APITOOL` | Get a single Dependabot alert. |
+| `github_get_dependabot_alerts` | `APITOOL` | List Dependabot alerts for a repository. |
 | `github_get_issue` | `APITOOL` | Get a single issue in a repository. |
 | `github_get_issues` | `APITOOL` | List issues for a repository. |
+| `github_get_org_dependabot_alerts` | `APITOOL` | List Dependabot alerts for an entire organization. |
 | `github_get_org_members` | `APITOOL` | List members for an organization. |
 | `github_get_org_repos` | `APITOOL` | List repositories for an organization. |
 | `github_get_org_teams` | `APITOOL` | List teams for an organization. |
@@ -181,6 +185,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 | `github_trigger_workflow_dispatch` | `APITOOL` | Trigger a workflow dispatch event. |
 | `github_update_branch_protection` | `APITOOL` | Update branch protection configuration. |
 | `github_update_content` | `APITOOL` | Update a file in a repository. |
+| `github_update_dependabot_alert` | `APITOOL` | Update the state of a Dependabot alert. |
 | `github_update_issue` | `APITOOL` | Update an issue in a repository. |
 | `github_update_organization` | `APITOOL` | Update an organization's profile and member settings. |
 | `github_update_pages` | `APITOOL` | Update the GitHub Pages configuration for a repository. |
@@ -190,7 +195,7 @@ _Auto-generated from the live MCP server — do not edit by hand._
 
 </details>
 
-_14 action-routed tool(s) (default) · 72 verbose 1:1 tool(s). Each is enabled unless its `<DOMAIN>TOOL` toggle is set false; `MCP_TOOL_MODE` selects the surface (`condensed` default · `verbose` 1:1 · `both`). Auto-generated — do not edit._
+_15 action-routed tool(s) (default) · 76 verbose 1:1 tool(s). Each is enabled unless its `<DOMAIN>TOOL` toggle is set false; `MCP_TOOL_MODE` selects the surface (`condensed` default · `verbose` 1:1 · `both`). Auto-generated — do not edit._
 <!-- MCP-TOOLS-TABLE:END -->
 
 Detailed tool schemas, parameter shapes, and validation constraints are preserved in [docs/mcp.md](docs/mcp.md).
@@ -245,6 +250,7 @@ When query strings or parameters are supplied, an LLM-free **Knowledge Graph res
         "COLLABORATORTOOL": "True",
         "COMMITTOOL": "True",
         "CONTENTTOOL": "True",
+        "DEPENDABOTTOOL": "True",
         "GITHUB_ALLOW_DESTRUCTIVE": "False",
         "GITHUB_HTTP_CONNECT_TIMEOUT": "10",
         "GITHUB_HTTP_READ_TIMEOUT": "30",
@@ -291,6 +297,7 @@ When query strings or parameters are supplied, an LLM-free **Knowledge Graph res
         "COLLABORATORTOOL": "True",
         "COMMITTOOL": "True",
         "CONTENTTOOL": "True",
+        "DEPENDABOTTOOL": "True",
         "GITHUB_ALLOW_DESTRUCTIVE": "False",
         "GITHUB_HTTP_CONNECT_TIMEOUT": "10",
         "GITHUB_HTTP_READ_TIMEOUT": "30",
@@ -338,6 +345,7 @@ docker run -d \
   -e COLLABORATORTOOL=True \
   -e COMMITTOOL=True \
   -e CONTENTTOOL=True \
+  -e DEPENDABOTTOOL=True \
   -e GITHUB_ALLOW_DESTRUCTIVE=False \
   -e GITHUB_HTTP_CONNECT_TIMEOUT=10 \
   -e GITHUB_HTTP_READ_TIMEOUT=30 \
@@ -408,6 +416,7 @@ consumed from a **remote deployment**. The
 | `COLLABORATORTOOL` | `True` |  |
 | `COMMITTOOL` | `True` |  |
 | `CONTENTTOOL` | `True` |  |
+| `DEPENDABOTTOOL` | `True` |  |
 | `GRAPHQLTOOL` | `True` |  |
 | `INGESTTOOL` | `True` |  |
 | `ISSUETOOL` | `True` |  |
@@ -434,7 +443,7 @@ consumed from a **remote deployment**. The
 | `MODEL_ID` | `gpt-4o` | Model id for the agent |
 | `ENABLE_WEB_UI` | `True` | Serve the AG-UI web interface |
 
-_33 package + 12 inherited variable(s). Auto-generated from `.env.example` + the shared agent-utilities set — do not edit._
+_34 package + 12 inherited variable(s). Auto-generated from `.env.example` + the shared agent-utilities set — do not edit._
 <!-- ENV-VARS-TABLE:END -->
 
 

{github_agent-1.1.1 → github_agent-1.2.0}/github_agent.egg-info/SOURCES.txt

@@ -23,6 +23,7 @@ github_agent/api/api_client_base.py
 github_agent/api/api_client_branches.py
 github_agent/api/api_client_commits.py
 github_agent/api/api_client_contents.py
+github_agent/api/api_client_dependabot.py
 github_agent/api/api_client_issues.py
 github_agent/api/api_client_orgs.py
 github_agent/api/api_client_pages.py
@@ -39,6 +40,7 @@ github_agent/mcp/mcp_branch.py
 github_agent/mcp/mcp_collaborator.py
 github_agent/mcp/mcp_commit.py
 github_agent/mcp/mcp_content.py
+github_agent/mcp/mcp_dependabot.py
 github_agent/mcp/mcp_issue.py
 github_agent/mcp/mcp_org.py
 github_agent/mcp/mcp_pull.py
@@ -52,6 +54,7 @@ github_agent/prompts/code_collaboration_specialist.json
 github_agent/prompts/main_agent.json
 github_agent/skills/__init__.py
 github_agent/skills/github-actions-ci-review/SKILL.md
+github_agent/skills/github-dependabot-review/SKILL.md
 github_agent/skills/github-issue-tracking/SKILL.md
 github_agent/skills/github-pull-request-create/SKILL.md
 github_agent/skills/github-pull-request-review/SKILL.md

{github_agent-1.1.1 → github_agent-1.2.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "github-agent"
-version = "1.1.1"
+version = "1.2.0"
 readme = "README.md"
 description = "GitHub Agent for MCP"
 requires-python = ">=3.11, <3.15"