GitHub MCP

Reference for the Tracecat GitHub MCP integration: registered actions, required secrets, expected inputs, and example workflow usage.

Cancel workflow run

Action ID: tools.github.cancel_workflow_run

Cancel workflow run. Calls POST /repos/{owner}/{repo}/actions/runs/{run_id}/cancel directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

run_id · integer · required

GitHub API path value for run_id.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

Compare commits

Action ID: tools.github.compare_commits

Compare commits. Calls GET /repos/{owner}/{repo}/compare/{basehead} directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

basehead · string · required

GitHub API path value for basehead.

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

page · integer | null

The page number of the results to fetch.

Default: null.

per_page · integer | null

The number of results per page (max 100).

Default: null.

Create issue

Action ID: tools.github.create_issue

Create issue. Calls POST /repos/{owner}/{repo}/issues directly. Accepted OAuth scopes: repo (default; omit only for public repository data). For bug reports, pass type: Bug where issue types are supported and labels: [bug] as the caller-controlled fallback; labels, assignees, milestone, and issue_field_values are passed through unchanged.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

payload · object | null

API-native request body passed through without validation. Body fields documented for POST /repos/{owner}/{repo}/issues: title (required), body, assignee, milestone, labels, assignees, issue_field_values, type.

Default: null.

Create issue comment

Action ID: tools.github.create_issue_comment

Create issue comment. Calls POST /repos/{owner}/{repo}/issues/{issue_number}/comments directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

body · string · required

The contents of the comment.

issue_number · integer · required

GitHub API path value for issue_number.

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

Create or update repository content

Action ID: tools.github.create_or_update_repository_content

Create or update repository content. Calls PUT /repos/{owner}/{repo}/contents/{path} directly. Accepted OAuth scopes: repo (default; omit only for public repository data); workflow when modifying .github/workflows.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

path · string · required

Nested repository content path.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

payload · object | null

API-native request body. Documented fields: content (required), message (required), author, branch, committer, sha.

Default: null.

Create pull request

Action ID: tools.github.create_pull_request

Create pull request. Calls POST /repos/{owner}/{repo}/pulls directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

payload · object | null

API-native request body passed through without validation. Body fields documented for POST /repos/{owner}/{repo}/pulls: title, head (required), head_repo, base (required), body, maintainer_can_modify, draft, issue.

Default: null.

Create pull request review

Action ID: tools.github.create_pull_request_review

Create pull request review. Calls POST /repos/{owner}/{repo}/pulls/{pull_number}/reviews directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

pull_number · integer · required

GitHub API path value for pull_number.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

payload · object | null

API-native request body passed through without validation. Body fields documented for POST /repos/{owner}/{repo}/pulls/{pull_number}/reviews: commit_id, body, event, comments.

Default: null.

Create pull request review comment

Action ID: tools.github.create_pull_request_review_comment

Create pull request review comment. Calls POST /repos/{owner}/{repo}/pulls/{pull_number}/comments directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

pull_number · integer · required

GitHub API path value for pull_number.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

payload · object | null

API-native request body passed through without validation. Body fields documented for POST /repos/{owner}/{repo}/pulls/{pull_number}/comments: body (required), commit_id (required), path (required), position, side, line, start_line, start_side, in_reply_to, subject_type.

Default: null.

Create repository security advisory

Action ID: tools.github.create_repository_security_advisory

Create repository security advisory. Calls POST /repos/{owner}/{repo}/security-advisories directly. Accepted OAuth scope: repo (default).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

payload · object | null

API-native request body. Documented fields: description (required), summary (required), vulnerabilities (required), credits, cve_id, cvss_vector_string, cwe_ids, severity, start_private_fork.

Default: null.

Create security advisory fork

Action ID: tools.github.create_security_advisory_fork

Create security advisory fork. Calls POST /repos/{owner}/{repo}/security-advisories/{ghsa_id}/forks directly. Accepted OAuth scope: repo (default).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

ghsa_id · string · required

GitHub API path value for ghsa_id.

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

Disable private vulnerability reporting

Action ID: tools.github.disable_private_vulnerability_reporting

Disable private vulnerability reporting. Calls DELETE /repos/{owner}/{repo}/private-vulnerability-reporting directly. Accepted OAuth scope: repo (default).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

Disable vulnerability alerts

Action ID: tools.github.disable_vulnerability_alerts

Disable vulnerability alerts. Calls DELETE /repos/{owner}/{repo}/vulnerability-alerts directly. Accepted OAuth scopes: security_events plus repo for private repository access.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

Dispatch workflow

Action ID: tools.github.dispatch_workflow

Dispatch workflow. Calls POST /repos/{owner}/{repo}/actions/workflows/{workflow_id}/dispatches directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

workflow_id · string | integer · required

GitHub API path value for workflow_id.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

payload · object | null

API-native request body passed through without validation. Body fields documented for POST /repos/{owner}/{repo}/actions/workflows/{workflow_id}/dispatches: ref (required), inputs, return_run_details.

Default: null.

Download workflow job logs

Action ID: tools.github.download_workflow_job_logs

Download workflow job logs. Calls GET /repos/{owner}/{repo}/actions/jobs/{job_id}/logs directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

job_id · integer · required

GitHub API path value for job_id.

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

Enable private vulnerability reporting

Action ID: tools.github.enable_private_vulnerability_reporting

Enable private vulnerability reporting. Calls PUT /repos/{owner}/{repo}/private-vulnerability-reporting directly. Accepted OAuth scope: repo (default).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

Enable vulnerability alerts

Action ID: tools.github.enable_vulnerability_alerts

Enable vulnerability alerts. Calls PUT /repos/{owner}/{repo}/vulnerability-alerts directly. Accepted OAuth scopes: security_events plus repo for private repository access.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

Get branch protection

Action ID: tools.github.get_branch_protection

Get branch protection. Calls GET /repos/{owner}/{repo}/branches/{branch}/protection directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

branch · string · required

GitHub API path value for branch.

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

Get code scanning alert

Action ID: tools.github.get_code_scanning_alert

Get code scanning alert. Calls GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number} directly. Accepted OAuth scopes: security_events plus repo for private repository access.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

alert_number · integer · required

GitHub API path value for alert_number.

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

Get code scanning default setup

Action ID: tools.github.get_code_scanning_default_setup

Get code scanning default setup. Calls GET /repos/{owner}/{repo}/code-scanning/default-setup directly. Accepted OAuth scopes: security_events plus repo for private repository access.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

Get commit

Action ID: tools.github.get_commit

Get commit. Calls GET /repos/{owner}/{repo}/commits/{ref} directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

ref · string · required

GitHub API path value for ref.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

page · integer | null

The page number of the results to fetch.

Default: null.

per_page · integer | null

The number of results per page (max 100).

Default: null.

Get dependabot alert

Action ID: tools.github.get_dependabot_alert

Get dependabot alert. Calls GET /repos/{owner}/{repo}/dependabot/alerts/{alert_number} directly. Accepted OAuth scopes: security_events plus repo for private repository access.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

alert_number · integer · required

GitHub API path value for alert_number.

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

Get gist

Action ID: tools.github.get_gist

Get gist. Calls GET /gists/{gist_id} directly. Accepted OAuth scopes: gist (required only for secret or authenticated-user gists; omit for public gists).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

gist_id · string · required

GitHub API path value for gist_id.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

Get global security advisory

Action ID: tools.github.get_global_security_advisory

Get global security advisory. Calls GET /advisories/{ghsa_id} directly. Accepted OAuth scope: repo (default).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

ghsa_id · string · required

GitHub API path value for ghsa_id.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

Get issue

Action ID: tools.github.get_issue

Get issue. Calls GET /repos/{owner}/{repo}/issues/{issue_number} directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

issue_number · integer · required

GitHub API path value for issue_number.

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

Get organization audit log

Action ID: tools.github.get_organization_audit_log

Get organization audit log. Calls GET /orgs/{org}/audit-log directly. Accepted OAuth scopes: read:audit_log.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

org · string · required

GitHub API path value for org.

after · string | null

A cursor, as given in the Link header. If specified, the query only searches for events after this cursor.

Default: null.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

before · string | null

A cursor, as given in the Link header. If specified, the query only searches for events before this cursor.

Default: null.

include · string | null

The event types to include: web - returns web (non-Git) events. git - returns Git events. all - returns both web and Git events. The default is web.

Default: null.

order · string | null

The order of audit log events. To list newest events first, specify desc. To list oldest events first, specify asc. The default is desc.

Default: null.

per_page · integer | null

The number of results per page (max 100).

Default: null.

phrase · string | null

A search phrase.

Default: null.

Get private vulnerability reporting

Action ID: tools.github.get_private_vulnerability_reporting

Get private vulnerability reporting. Calls GET /repos/{owner}/{repo}/private-vulnerability-reporting directly. Accepted OAuth scope: repo (default).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

Get pull request

Action ID: tools.github.get_pull_request

Get pull request. Calls GET /repos/{owner}/{repo}/pulls/{pull_number} directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

pull_number · integer · required

GitHub API path value for pull_number.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

Get pull request merge state

Action ID: tools.github.get_pull_request_merge_state

Get pull request merge state. Calls GET /repos/{owner}/{repo}/pulls/{pull_number}/merge directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

pull_number · integer · required

GitHub API path value for pull_number.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

Get repository

Action ID: tools.github.get_repository

Get repository. Calls GET /repos/{owner}/{repo} directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

Get repository collaborator permission

Action ID: tools.github.get_repository_collaborator_permission

Get repository collaborator permission. Calls GET /repos/{owner}/{repo}/collaborators/{username}/permission directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

username · string · required

GitHub API path value for username.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

Get repository content

Action ID: tools.github.get_repository_content

Get repository content. Calls GET /repos/{owner}/{repo}/contents/{path} directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

path · string · required

Nested repository content path.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

ref · string | null

The name of the commit/branch/tag. Default: the repository’s default branch.

Default: null.

Get repository sbom

Action ID: tools.github.get_repository_sbom

Get repository sbom. Calls GET /repos/{owner}/{repo}/dependency-graph/sbom directly. Accepted OAuth scopes: security_events plus repo for private repository access.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

Get repository security advisory

Action ID: tools.github.get_repo_security_advisory

Get repository security advisory. Calls GET /repos/{owner}/{repo}/security-advisories/{ghsa_id} directly. Accepted OAuth scope: repo (default).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

ghsa_id · string · required

GitHub API path value for ghsa_id.

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

Get secret scanning alert

Action ID: tools.github.get_secret_scanning_alert

Get secret scanning alert. Calls GET /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number} directly. Accepted OAuth scopes: security_events plus repo for private repository access.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

alert_number · integer · required

GitHub API path value for alert_number.

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

hide_secret · boolean | null

A boolean value representing whether or not to hide literal secrets in the results. Default: false.

Default: null.

Get vulnerability alert status

Action ID: tools.github.get_vulnerability_alert_status

Get vulnerability alert status. Calls GET /repos/{owner}/{repo}/vulnerability-alerts directly. Accepted OAuth scopes: security_events plus repo for private repository access.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

Get workflow run

Action ID: tools.github.get_workflow_run

Get workflow run. Calls GET /repos/{owner}/{repo}/actions/runs/{run_id} directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

run_id · integer · required

GitHub API path value for run_id.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

exclude_pull_requests · boolean | null

If true pull requests are omitted from the response (empty array).

Default: null.

GitHub MCP

Action ID: tools.github.mcp

Use AI to interact with GitHub.

Reference: https://docs.github.com/en/copilot

Secrets

Required secrets:

• github_mcp_oauth: OAuth token GITHUB_MCP_USER_TOKEN.

Optional secrets:

• anthropic: optional values ANTHROPIC_API_KEY.
• openai: optional values OPENAI_API_KEY.
• gemini: optional values GEMINI_API_KEY.
• mistral: optional values MISTRAL_API_KEY.
• amazon_bedrock: optional values AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_REGION, AWS_ROLE_ARN, AWS_ROLE_SESSION_NAME, AWS_SESSION_TOKEN, AWS_BEARER_TOKEN_BEDROCK, AWS_MODEL_ID, AWS_INFERENCE_PROFILE_ID.
• custom-model-provider: optional values CUSTOM_MODEL_PROVIDER_API_KEY, CUSTOM_MODEL_PROVIDER_MODEL_NAME, CUSTOM_MODEL_PROVIDER_BASE_URL.
• azure_openai: optional values AZURE_API_BASE, AZURE_API_VERSION, AZURE_DEPLOYMENT_NAME, AZURE_API_KEY, AZURE_AD_TOKEN, AZURE_TENANT_ID, AZURE_CLIENT_ID, AZURE_CLIENT_SECRET.
• azure_ai: optional values AZURE_API_BASE, AZURE_API_KEY, AZURE_AD_TOKEN, AZURE_TENANT_ID, AZURE_CLIENT_ID, AZURE_CLIENT_SECRET, AZURE_API_VERSION, AZURE_AI_MODEL_NAME.
• litellm: required values LITELLM_BASE_URL.

Input fields

instructions · string · required

Instructions for the agent.

user_prompt · string · required

User prompt to the agent.

model · ModelSelection | null

Model to use. Pick from the list of models enabled for this workspace. Provide this field, or both deprecated model_name and model_provider.

Default: null.

model_name · string | null

Deprecated. Use model instead. If model is omitted, set this together with model_provider.

Default: null.

model_provider · string | null

Deprecated. Use model instead. If model is omitted, set this together with model_name.

Default: null.

List code scanning alert instances

Action ID: tools.github.list_code_scanning_alert_instances

List code scanning alert instances. Calls GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/instances directly. Accepted OAuth scopes: security_events plus repo for private repository access.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

alert_number · integer · required

GitHub API path value for alert_number.

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

page · integer | null

The page number of the results to fetch. Default: 1.

Default: null.

per_page · integer | null

The number of results per page (max 100). Default: 30.

Default: null.

pr · integer | null

The number of the pull request for the results you want to list.

Default: null.

ref · string | null

The Git reference for the results you want to list. The ref for a branch can be formatted either as refs/heads/<branch name> or simply <branch name>. To reference a pull request use refs/pull/<number>/merge.

Default: null.

List commits

Action ID: tools.github.list_commits

List commits. Calls GET /repos/{owner}/{repo}/commits directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

author · string | null

GitHub username or email address to use to filter by commit author.

Default: null.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

committer · string | null

GitHub username or email address to use to filter by commit committer.

Default: null.

page · integer | null

The page number of the results to fetch.

Default: null.

path · string | null

Only commits containing this file path will be returned.

Default: null.

per_page · integer | null

The number of results per page (max 100).

Default: null.

sha · string | null

SHA or branch to start listing commits from. Default: the repository’s default branch (usually main).

Default: null.

since · string | null

Only show results that were last updated after the given time. This is a timestamp in ISO 8601 format: YYYY-MM-DDTHH:MM:SSZ. Due to limitations of Git, timestamps must be between 1970-01-01 and 2099-12-31 (inclusive) or unexpected results may be returned.

Default: null.

until · string | null

Only commits before this date will be returned. This is a timestamp in ISO 8601 format: YYYY-MM-DDTHH:MM:SSZ. Due to limitations of Git, timestamps must be between 1970-01-01 and 2099-12-31 (inclusive) or unexpected results may be returned.

Default: null.

List gist commits

Action ID: tools.github.list_gist_commits

List gist commits. Calls GET /gists/{gist_id}/commits directly. Accepted OAuth scopes: gist (required only for secret or authenticated-user gists; omit for public gists).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

gist_id · string · required

GitHub API path value for gist_id.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

page · integer | null

The page number of the results to fetch.

Default: null.

per_page · integer | null

The number of results per page (max 100).

Default: null.

List global security advisories

Action ID: tools.github.list_global_security_advisories

List global security advisories. Calls GET /advisories directly. Accepted OAuth scope: repo (default).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

affects · string | null

If specified, only return advisories that affect any of package or package@version. A maximum of 1000 packages can be specified. If the query parameter causes the URL to exceed the maximum URL length supported by your client, you must specify fewer packages. Example: affects=package1,package2@1.0.0,package3@2.0.0 or affects[]=package1&affects[]=package2@1.0.0

Default: null.

after · string | null

A cursor, as given in the Link header. If specified, the query only searches for results after this cursor.

Default: null.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

before · string | null

A cursor, as given in the Link header. If specified, the query only searches for results before this cursor.

Default: null.

cve_id · string | null

If specified, only advisories with this CVE (Common Vulnerabilities and Exposures) identifier will be returned.

Default: null.

cwes · string | null

If specified, only advisories with these Common Weakness Enumerations (CWEs) will be returned. Example: cwes=79,284,22 or cwes[]=79&cwes[]=284&cwes[]=22

Default: null.

direction · string | null

The direction to sort the results by. Default: desc. Can be one of: asc, desc.

Default: null.

ecosystem · string | null

If specified, only advisories for these ecosystems will be returned. Can be one of: rubygems, npm, pip, maven, nuget, composer, go, rust, erlang, actions, pub, other, swift.

Default: null.

epss_percentage · string | null

If specified, only return advisories that have an EPSS percentage score that matches the provided value. The EPSS percentage represents the likelihood of a CVE being exploited.

Default: null.

epss_percentile · string | null

If specified, only return advisories that have an EPSS percentile score that matches the provided value. The EPSS percentile represents the relative rank of the CVE’s likelihood of being exploited compared to other CVEs.

Default: null.

ghsa_id · string | null

If specified, only advisories with this GHSA (GitHub Security Advisory) identifier will be returned.

Default: null.

is_withdrawn · boolean | null

Whether to only return advisories that have been withdrawn.

Default: null.

modified · string | null

If specified, only show advisories that were updated or published on a date or date range.

Default: null.

per_page · integer | null

The number of results per page (max 100). Default: 30.

Default: null.

published · string | null

If specified, only return advisories that were published on a date or date range.

Default: null.

severity · string | null

If specified, only advisories with these severities will be returned. Can be one of: unknown, low, medium, high, critical.

Default: null.

sort · string | null

The property to sort the results by. Default: published. Can be one of: updated, published, epss_percentage, epss_percentile.

Default: null.

type · string | null

If specified, only advisories of this type will be returned. By default, a request with no other parameters defined will only return reviewed advisories that are not malware. Default: reviewed. Can be one of: reviewed, malware, unreviewed.

Default: null.

updated · string | null

If specified, only return advisories that were updated on a date or date range.

Default: null.

List issue comments

Action ID: tools.github.list_issue_comments

List issue comments. Calls GET /repos/{owner}/{repo}/issues/{issue_number}/comments directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

issue_number · integer · required

GitHub API path value for issue_number.

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

page · integer | null

The page number of the results to fetch.

Default: null.

per_page · integer | null

The number of results per page (max 100).

Default: null.

since · string | null

Only show results that were last updated after the given time. This is a timestamp in ISO 8601 format: YYYY-MM-DDTHH:MM:SSZ.

Default: null.

List organization code scanning alerts

Action ID: tools.github.list_org_code_scanning_alerts

List organization code scanning alerts. Calls GET /orgs/{org}/code-scanning/alerts directly. Accepted OAuth scopes: security_events plus repo for private repository access.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

org · string · required

GitHub API path value for org.

after · string | null

A cursor, as given in the Link header. If specified, the query only searches for results after this cursor.

Default: null.

assignees · string | null

Filter alerts by assignees. Provide a comma-separated list of user handles (e.g., octocat or octocat,hubot). Use * to list alerts with at least one assignee or none to list alerts with no assignees.

Default: null.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

before · string | null

A cursor, as given in the Link header. If specified, the query only searches for results before this cursor.

Default: null.

direction · string | null

The direction to sort the results by. Default: desc. Can be one of: asc, desc.

Default: null.

page · integer | null

The page number of the results to fetch. Default: 1.

Default: null.

per_page · integer | null

The number of results per page (max 100). Default: 30.

Default: null.

severity · string | null

If specified, only code scanning alerts with this severity will be returned. Can be one of: critical, high, medium, low, warning, note, error.

Default: null.

sort · string | null

The property by which to sort the results. Default: created. Can be one of: created, updated.

Default: null.

state · string | null

If specified, only code scanning alerts with this state will be returned. Can be one of: open, closed, dismissed, fixed.

Default: null.

tool_guid · string | null

The GUID of a code scanning tool. Only results by this tool will be listed. Note that some code scanning tools may not include a GUID in their analysis data. You can specify the tool by using either tool_guid or tool_name, but not both.

Default: null.

tool_name · string | null

The name of a code scanning tool. Only results by this tool will be listed. You can specify the tool by using either tool_name or tool_guid, but not both.

Default: null.

List organization dependabot alerts

Action ID: tools.github.list_org_dependabot_alerts

List organization dependabot alerts. Calls GET /orgs/{org}/dependabot/alerts directly. Accepted OAuth scopes: security_events plus repo for private repository access.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

org · string · required

GitHub API path value for org.

after · string | null

A cursor, as given in the Link header. If specified, the query only searches for results after this cursor.

Default: null.

artifact_registry · string | null

A comma-separated list of Artifact Registry name strings. If specified, only alerts for repositories with storage records matching these registries will be returned. Can be: jfrog-artifactory

Default: null.

artifact_registry_url · string | null

A comma-separated list of artifact registry URLs. If specified, only alerts for repositories with storage records matching these URLs will be returned.

Default: null.

assignee · string | null

Filter alerts by assignees. Provide a comma-separated list of user handles (e.g., octocat or octocat,hubot) to return alerts assigned to any of the specified users. Use * to list alerts with at least one assignee or none to list alerts with no assignees.

Default: null.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

before · string | null

A cursor, as given in the Link header. If specified, the query only searches for results before this cursor.

Default: null.

classification · string | null

A comma-separated list of vulnerability classifications. If specified, only alerts for vulnerabilities with these classifications will be returned. Can be: malware, general

Default: null.

direction · string | null

The direction to sort the results by. Default: desc. Can be one of: asc, desc.

Default: null.

ecosystem · string | null

A comma-separated list of ecosystems. If specified, only alerts for these ecosystems will be returned. Can be: composer, go, maven, npm, nuget, pip, pub, rubygems, rust

Default: null.

epss_percentage · string | null

CVE Exploit Prediction Scoring System (EPSS) percentage. Can be specified as: - An exact number (n) - Comparators such as >n, <n, >=n, <=n - A range like n..n, where n is a number from 0.0 to 1.0 Filters the list of alerts based on EPSS percentages. If specified, only alerts with the provided EPSS percentages will be returned.

Default: null.

has · array[string] | null

Filters the list of alerts based on whether the alert has the given value. If specified, only alerts meeting this criterion will be returned. Multiple has filters can be passed to filter for alerts that have all of the values.

Default: null.

package · string | null

A comma-separated list of package names. If specified, only alerts for these packages will be returned.

Default: null.

per_page · integer | null

The number of results per page (max 100). Default: 30.

Default: null.

relationship · string | null

A comma-separated list of relationships of the vulnerable dependency to your project. If specified, only alerts with these relationships will be returned. We are rolling out support for dependency relationship across ecosystems. This value will be “unknown” for all dependencies in unsupported ecosystems.

Default: null.

runtime_risk · string | null

A comma-separated list of runtime risk strings. If specified, only alerts for repositories with deployment records matching these risks will be returned. Can be: critical-resource, internet-exposed, sensitive-data, lateral-movement

Default: null.

scope · string | null

The scope of the vulnerable dependency. If specified, only alerts with this scope will be returned. Can be one of: development, runtime.

Default: null.

severity · string | null

A comma-separated list of severities. If specified, only alerts with these severities will be returned. Can be: low, medium, high, critical

Default: null.

sort · string | null

The property by which to sort the results. created means when the alert was created. updated means when the alert’s state last changed. epss_percentage sorts alerts by the Exploit Prediction Scoring System (EPSS) percentage. Default: created.

Default: null.

state · string | null

A comma-separated list of states. If specified, only alerts with these states will be returned. Can be: auto_dismissed, dismissed, fixed, open

Default: null.

List organization secret scanning alerts

Action ID: tools.github.list_org_secret_scanning_alerts

List organization secret scanning alerts. Calls GET /orgs/{org}/secret-scanning/alerts directly. Accepted OAuth scopes: security_events plus repo for private repository access.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

org · string · required

GitHub API path value for org.

after · string | null

A cursor, as given in the Link header. If specified, the query only searches for events after this cursor. To receive an initial cursor on your first request, include an empty “after” query string.

Default: null.

assignee · string | null

Filters alerts by assignee. Use * to get all assigned alerts, none to get all unassigned alerts, or a GitHub username to get alerts assigned to a specific user.

Default: null.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

before · string | null

A cursor, as given in the Link header. If specified, the query only searches for events before this cursor. To receive an initial cursor on your first request, include an empty “before” query string.

Default: null.

direction · string | null

The direction to sort the results by. Default: desc. Can be one of: asc, desc.

Default: null.

exclude_providers · string | null

A comma-separated list of provider slugs to exclude from the results. Provider slugs use lowercase with underscores (e.g., github_secret_scanning, clojars). You can find the provider slug in the provider_slug field of each alert. Cannot be combined with the providers parameter.

Default: null.

exclude_secret_types · string | null

A comma-separated list of secret types to exclude from the results. All default secret patterns are returned except those matching the specified types. Cannot be combined with the secret_type parameter. See “Supported secret scanning patterns” for a complete list of secret types.

Default: null.

hide_secret · boolean | null

A boolean value representing whether or not to hide literal secrets in the results. Default: false.

Default: null.

included_metadata · string | null

A comma-separated list of metadata fields to filter alerts by. Only alerts that have all of the specified metadata fields attached will be returned. Possible values are: owner-email, owner-id, owner-name, secret-id, secret-name, secret-issued-date, secret-expiration-date, organization-name, organization-id, last-used-date, and has-organization-access.

Default: null.

is_bypassed · boolean | null

A boolean value (true or false) indicating whether to filter alerts by their push protection bypass status. When set to true, only alerts that were created because a push protection rule was bypassed will be returned. When set to false, only alerts that were not caused by a push protection bypass will be returned.

Default: null.

is_multi_repo · boolean | null

A boolean value representing whether or not to filter alerts by the multi-repo tag being present. Default: false.

Default: null.

is_publicly_leaked · boolean | null

A boolean value representing whether or not to filter alerts by the publicly-leaked tag being present. Default: false.

Default: null.

owner_email_hash · string | null

Filters alerts to only those whose attached owner_email metadata field matches the provided value. The value must be the lowercase hex-encoded SHA-256 hash of the email address to match (for example, the SHA-256 of [e-mail]). Only alerts that have an owner_email metadata value whose SHA-256 hash equals this parameter are returned.

Default: null.

page · integer | null

The page number of the results to fetch. Default: 1.

Default: null.

per_page · integer | null

The number of results per page (max 100). Default: 30.

Default: null.

providers · string | null

A comma-separated list of provider slugs to filter by. Provider slugs use lowercase with underscores (e.g., github_secret_scanning, clojars). You can find the provider slug in the provider_slug field of each alert. Cannot be combined with the exclude_providers parameter.

Default: null.

resolution · string | null

A comma-separated list of resolutions. Only secret scanning alerts with one of these resolutions are listed. Valid resolutions are false_positive, wont_fix, revoked, pattern_edited, pattern_deleted or used_in_tests.

Default: null.

secret_type · string | null

A comma-separated list of secret types to return. All default secret patterns are returned. To return generic patterns, pass the token name(s) in the parameter. See “Supported secret scanning patterns” for a complete list of secret types.

Default: null.

sort · string | null

The property to sort the results by. created means when the alert was created. updated means when the alert was updated or resolved. Default: created.

Default: null.

state · string | null

Set to open or resolved to only list secret scanning alerts in a specific state.

Default: null.

validity · string | null

A comma-separated list of validities that, when present, will return alerts that match the validities in this list. Valid options are active, inactive, and unknown.

Default: null.

List organization security advisories

Action ID: tools.github.list_organization_security_advisories

List organization security advisories. Calls GET /orgs/{org}/security-advisories directly. Accepted OAuth scope: repo (default).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

org · string · required

GitHub API path value for org.

after · string | null

A cursor, as given in the Link header. If specified, the query only searches for results after this cursor.

Default: null.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

before · string | null

A cursor, as given in the Link header. If specified, the query only searches for results before this cursor.

Default: null.

direction · string | null

The direction to sort the results by. Default: desc. Can be one of: asc, desc.

Default: null.

per_page · integer | null

The number of advisories to return per page. Default: 30.

Default: null.

sort · string | null

The property to sort the results by. Default: created. Can be one of: created, updated, published.

Default: null.

state · string | null

Filter by the state of the repository advisories. Only advisories of this state will be returned. Can be one of: triage, draft, published, closed.

Default: null.

List pull request files

Action ID: tools.github.list_pull_request_files

List pull request files. Calls GET /repos/{owner}/{repo}/pulls/{pull_number}/files directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

pull_number · integer · required

GitHub API path value for pull_number.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

page · integer | null

The page number of the results to fetch.

Default: null.

per_page · integer | null

The number of results per page (max 100).

Default: null.

List pull request review comments

Action ID: tools.github.list_pull_request_review_comments

List pull request review comments. Calls GET /repos/{owner}/{repo}/pulls/{pull_number}/comments directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

pull_number · integer · required

GitHub API path value for pull_number.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

direction · string | null

The direction to sort results. Ignored without sort parameter. Can be one of: asc, desc.

Default: null.

page · integer | null

The page number of the results to fetch.

Default: null.

per_page · integer | null

The number of results per page (max 100).

Default: null.

since · string | null

Only show results that were last updated after the given time. This is a timestamp in ISO 8601 format: YYYY-MM-DDTHH:MM:SSZ.

Default: null.

sort · string | null

The property to sort the results by. Can be one of: created, updated.

Default: null.

List pull requests

Action ID: tools.github.list_pull_requests

List pull requests. Calls GET /repos/{owner}/{repo}/pulls directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base · string | null

Filter pulls by base branch name. Example: gh-pages.

Default: null.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

direction · string | null

The direction of the sort. Default: desc when sort is created or sort is not specified, otherwise asc. Can be one of: asc, desc.

Default: null.

head · string | null

Filter pulls by head user or head organization and branch name in the format of user:ref-name or organization:ref-name. For example: github:new-script-format or octocat:test-branch.

Default: null.

page · integer | null

The page number of the results to fetch.

Default: null.

per_page · integer | null

The number of results per page (max 100).

Default: null.

sort · string | null

What to sort results by. popularity will sort by the number of comments. long-running will sort by date created and will limit the results to pull requests that have been open for more than a month and have had activity within the past month. Can be one of: created, updated, popularity, long-running.

Default: null.

state · string | null

Either open, closed, or all to filter by state. Can be one of: open, closed, all.

Default: null.

List repository code scanning alerts

Action ID: tools.github.list_repo_code_scanning_alerts

List repository code scanning alerts. Calls GET /repos/{owner}/{repo}/code-scanning/alerts directly. Accepted OAuth scopes: security_events plus repo for private repository access.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

after · string | null

A cursor, as given in the Link header. If specified, the query only searches for results after this cursor.

Default: null.

assignees · string | null

Filter alerts by assignees. Provide a comma-separated list of user handles (e.g., octocat or octocat,hubot). Use * to list alerts with at least one assignee or none to list alerts with no assignees.

Default: null.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

before · string | null

A cursor, as given in the Link header. If specified, the query only searches for results before this cursor.

Default: null.

direction · string | null

The direction to sort the results by. Default: desc. Can be one of: asc, desc.

Default: null.

page · integer | null

The page number of the results to fetch. Default: 1.

Default: null.

per_page · integer | null

The number of results per page (max 100). Default: 30.

Default: null.

pr · integer | null

The number of the pull request for the results you want to list.

Default: null.

ref · string | null

The Git reference for the results you want to list. The ref for a branch can be formatted either as refs/heads/<branch name> or simply <branch name>. To reference a pull request use refs/pull/<number>/merge.

Default: null.

severity · string | null

If specified, only code scanning alerts with this severity will be returned. Can be one of: critical, high, medium, low, warning, note, error.

Default: null.

sort · string | null

The property by which to sort the results. Default: created. Can be one of: created, updated.

Default: null.

state · string | null

If specified, only code scanning alerts with this state will be returned. Can be one of: open, closed, dismissed, fixed.

Default: null.

tool_guid · string | null

The GUID of a code scanning tool. Only results by this tool will be listed. Note that some code scanning tools may not include a GUID in their analysis data. You can specify the tool by using either tool_guid or tool_name, but not both.

Default: null.

tool_name · string | null

The name of a code scanning tool. Only results by this tool will be listed. You can specify the tool by using either tool_name or tool_guid, but not both.

Default: null.

List repository dependabot alerts

Action ID: tools.github.list_repo_dependabot_alerts

List repository dependabot alerts. Calls GET /repos/{owner}/{repo}/dependabot/alerts directly. Accepted OAuth scopes: security_events plus repo for private repository access.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

after · string | null

A cursor, as given in the Link header. If specified, the query only searches for results after this cursor.

Default: null.

assignee · string | null

Filter alerts by assignees. Provide a comma-separated list of user handles (e.g., octocat or octocat,hubot) to return alerts assigned to any of the specified users. Use * to list alerts with at least one assignee or none to list alerts with no assignees.

Default: null.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

before · string | null

A cursor, as given in the Link header. If specified, the query only searches for results before this cursor.

Default: null.

classification · string | null

A comma-separated list of vulnerability classifications. If specified, only alerts for vulnerabilities with these classifications will be returned. Can be: malware, general

Default: null.

direction · string | null

The direction to sort the results by. Default: desc. Can be one of: asc, desc.

Default: null.

ecosystem · string | null

A comma-separated list of ecosystems. If specified, only alerts for these ecosystems will be returned. Can be: composer, go, maven, npm, nuget, pip, pub, rubygems, rust

Default: null.

epss_percentage · string | null

CVE Exploit Prediction Scoring System (EPSS) percentage. Can be specified as: - An exact number (n) - Comparators such as >n, <n, >=n, <=n - A range like n..n, where n is a number from 0.0 to 1.0 Filters the list of alerts based on EPSS percentages. If specified, only alerts with the provided EPSS percentages will be returned.

Default: null.

has · array[string] | null

Filters the list of alerts based on whether the alert has the given value. If specified, only alerts meeting this criterion will be returned. Multiple has filters can be passed to filter for alerts that have all of the values. Currently, only patch is supported.

Default: null.

manifest · string | null

A comma-separated list of full manifest paths. If specified, only alerts for these manifests will be returned.

Default: null.

package · string | null

A comma-separated list of package names. If specified, only alerts for these packages will be returned.

Default: null.

per_page · integer | null

The number of results per page (max 100). Default: 30.

Default: null.

relationship · string | null

A comma-separated list of relationships of the vulnerable dependency to your project. If specified, only alerts with these relationships will be returned. We are rolling out support for dependency relationship across ecosystems. This value will be “unknown” for all dependencies in unsupported ecosystems.

Default: null.

scope · string | null

The scope of the vulnerable dependency. If specified, only alerts with this scope will be returned. Can be one of: development, runtime.

Default: null.

severity · string | null

A comma-separated list of severities. If specified, only alerts with these severities will be returned. Can be: low, medium, high, critical

Default: null.

sort · string | null

The property by which to sort the results. created means when the alert was created. updated means when the alert’s state last changed. epss_percentage sorts alerts by the Exploit Prediction Scoring System (EPSS) percentage. Default: created.

Default: null.

state · string | null

A comma-separated list of states. If specified, only alerts with these states will be returned. Can be: auto_dismissed, dismissed, fixed, open

Default: null.

List repository issues

Action ID: tools.github.list_repository_issues

List repository issues. Calls GET /repos/{owner}/{repo}/issues directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

assignee · string | null

Can be the name of a user. Pass in none for issues with no assigned user, and * for issues assigned to any user.

Default: null.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

creator · string | null

The user that created the issue.

Default: null.

direction · string | null

The direction to sort the results by. Can be one of: asc, desc.

Default: null.

issue_field_values · string | null

A comma-separated list of issue field filters in field_slug:value format. Only issues matching all specified field values are returned. Requires issue fields to be enabled for the repository. Issue fields are not available for user-owned repositories, and field availability for organization-owned public repositories depends on the organization’s visibility settings. For example, priority:Urgent,severity:High filters issues where the priority field is Urgent AND the severity field is High.

Default: null.

labels · string | null

A list of comma separated label names. Example: bug,ui,@high

Default: null.

mentioned · string | null

A user that’s mentioned in the issue.

Default: null.

milestone · integer | string | null

If an integer is passed, it should refer to a milestone by its number field. If the string * is passed, issues with any milestone are accepted. If the string none is passed, issues without milestones are returned.

Default: null.

page · integer | null

The page number of the results to fetch.

Default: null.

per_page · integer | null

The number of results per page (max 100).

Default: null.

since · string | null

Only show results that were last updated after the given time. This is a timestamp in ISO 8601 format: YYYY-MM-DDTHH:MM:SSZ.

Default: null.

sort · string | null

What to sort results by. Can be one of: created, updated, comments.

Default: null.

state · string | null

Indicates the state of the issues to return. Can be one of: open, closed, all.

Default: null.

type · string | null

Can be the name of an issue type. If the string * is passed, issues with any type are accepted. If the string none is passed, issues without type are returned.

Default: null.

List repository secret scanning alerts

Action ID: tools.github.list_repo_secret_scanning_alerts

List repository secret scanning alerts. Calls GET /repos/{owner}/{repo}/secret-scanning/alerts directly. Accepted OAuth scopes: security_events plus repo for private repository access.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

after · string | null

A cursor, as given in the Link header. If specified, the query only searches for events after this cursor. To receive an initial cursor on your first request, include an empty “after” query string.

Default: null.

assignee · string | null

Filters alerts by assignee. Use * to get all assigned alerts, none to get all unassigned alerts, or a GitHub username to get alerts assigned to a specific user.

Default: null.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

before · string | null

A cursor, as given in the Link header. If specified, the query only searches for events before this cursor. To receive an initial cursor on your first request, include an empty “before” query string.

Default: null.

direction · string | null

The direction to sort the results by. Default: desc. Can be one of: asc, desc.

Default: null.

exclude_providers · string | null

A comma-separated list of provider slugs to exclude from the results. Provider slugs use lowercase with underscores (e.g., github_secret_scanning, clojars). You can find the provider slug in the provider_slug field of each alert. Cannot be combined with the providers parameter.

Default: null.

exclude_secret_types · string | null

A comma-separated list of secret types to exclude from the results. All default secret patterns are returned except those matching the specified types. Cannot be combined with the secret_type parameter. See “Supported secret scanning patterns” for a complete list of secret types.

Default: null.

hide_secret · boolean | null

A boolean value representing whether or not to hide literal secrets in the results. Default: false.

Default: null.

included_metadata · string | null

A comma-separated list of metadata fields to filter alerts by. Only alerts that have all of the specified metadata fields attached will be returned. Possible values are: owner-email, owner-id, owner-name, secret-id, secret-name, secret-issued-date, secret-expiration-date, organization-name, organization-id, last-used-date, and has-organization-access.

Default: null.

is_bypassed · boolean | null

A boolean value (true or false) indicating whether to filter alerts by their push protection bypass status. When set to true, only alerts that were created because a push protection rule was bypassed will be returned. When set to false, only alerts that were not caused by a push protection bypass will be returned.

Default: null.

is_multi_repo · boolean | null

A boolean value representing whether or not to filter alerts by the multi-repo tag being present. Default: false.

Default: null.

is_publicly_leaked · boolean | null

A boolean value representing whether or not to filter alerts by the publicly-leaked tag being present. Default: false.

Default: null.

owner_email_hash · string | null

Filters alerts to only those whose attached owner_email metadata field matches the provided value. The value must be the lowercase hex-encoded SHA-256 hash of the email address to match (for example, the SHA-256 of [e-mail]). Only alerts that have an owner_email metadata value whose SHA-256 hash equals this parameter are returned.

Default: null.

page · integer | null

The page number of the results to fetch. Default: 1.

Default: null.

per_page · integer | null

The number of results per page (max 100). Default: 30.

Default: null.

providers · string | null

A comma-separated list of provider slugs to filter by. Provider slugs use lowercase with underscores (e.g., github_secret_scanning, clojars). You can find the provider slug in the provider_slug field of each alert. Cannot be combined with the exclude_providers parameter.

Default: null.

resolution · string | null

A comma-separated list of resolutions. Only secret scanning alerts with one of these resolutions are listed. Valid resolutions are false_positive, wont_fix, revoked, pattern_edited, pattern_deleted or used_in_tests.

Default: null.

secret_type · string | null

A comma-separated list of secret types to return. All default secret patterns are returned. To return generic patterns, pass the token name(s) in the parameter. See “Supported secret scanning patterns” for a complete list of secret types.

Default: null.

sort · string | null

The property to sort the results by. created means when the alert was created. updated means when the alert was updated or resolved. Default: created.

Default: null.

state · string | null

Set to open or resolved to only list secret scanning alerts in a specific state.

Default: null.

validity · string | null

A comma-separated list of validities that, when present, will return alerts that match the validities in this list. Valid options are active, inactive, and unknown.

Default: null.

List repository security advisories

Action ID: tools.github.list_repo_security_advisories

List repository security advisories. Calls GET /repos/{owner}/{repo}/security-advisories directly. Accepted OAuth scope: repo (default).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

after · string | null

A cursor, as given in the Link header. If specified, the query only searches for results after this cursor.

Default: null.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

before · string | null

A cursor, as given in the Link header. If specified, the query only searches for results before this cursor.

Default: null.

direction · string | null

The direction to sort the results by. Default: desc. Can be one of: asc, desc.

Default: null.

per_page · integer | null

The number of advisories to return per page. Default: 30.

Default: null.

sort · string | null

The property to sort the results by. Default: created. Can be one of: created, updated, published.

Default: null.

state · string | null

Filter by state of the repository advisories. Only advisories of this state will be returned. Can be one of: triage, draft, published, closed.

Default: null.

List repository workflow runs

Action ID: tools.github.list_repository_workflow_runs

List repository workflow runs. Calls GET /repos/{owner}/{repo}/actions/runs directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

actor · string | null

Returns someone’s workflow runs. Use the login for the user who created the push associated with the check suite or workflow run.

Default: null.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

branch · string | null

Returns workflow runs associated with a branch. Use the name of the branch of the push.

Default: null.

check_suite_id · integer | null

Returns workflow runs with the check_suite_id that you specify.

Default: null.

created · string | null

Returns workflow runs created within the given date-time range. For more information on the syntax, see “Understanding the search syntax.”

Default: null.

event · string | null

Returns workflow run triggered by the event you specify. For example, push, pull_request or issue. For more information, see “Events that trigger workflows.”

Default: null.

exclude_pull_requests · boolean | null

If true pull requests are omitted from the response (empty array).

Default: null.

head_sha · string | null

Only returns workflow runs that are associated with the specified head_sha.

Default: null.

page · integer | null

The page number of the results to fetch.

Default: null.

per_page · integer | null

The number of results per page (max 100).

Default: null.

status · string | null

Returns workflow runs with the check run status or conclusion that you specify. For example, a conclusion can be success or a status can be in_progress. Only GitHub Actions can set a status of waiting, pending, or requested. Can be one of: completed, action_required, cancelled, failure, neutral, skipped, stale, success, timed_out, in_progress, queued, requested, waiting, pending.

Default: null.

List repository workflows

Action ID: tools.github.list_repository_workflows

List repository workflows. Calls GET /repos/{owner}/{repo}/actions/workflows directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

page · integer | null

The page number of the results to fetch.

Default: null.

per_page · integer | null

The number of results per page (max 100).

Default: null.

List secret scanning alert locations

Action ID: tools.github.list_secret_scanning_alert_locations

List secret scanning alert locations. Calls GET /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}/locations directly. Accepted OAuth scopes: security_events plus repo for private repository access.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

alert_number · integer · required

GitHub API path value for alert_number.

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

page · integer | null

The page number of the results to fetch. Default: 1.

Default: null.

per_page · integer | null

The number of results per page (max 100). Default: 30.

Default: null.

List workflow run jobs

Action ID: tools.github.list_workflow_run_jobs

List workflow run jobs. Calls GET /repos/{owner}/{repo}/actions/runs/{run_id}/jobs directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

run_id · integer · required

GitHub API path value for run_id.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

filter · string | null

Filters jobs by their completed_at timestamp. latest returns jobs from the most recent execution of the workflow run. all returns all jobs for a workflow run, including from old executions of the workflow run. Can be one of: latest, all.

Default: null.

page · integer | null

The page number of the results to fetch.

Default: null.

per_page · integer | null

The number of results per page (max 100).

Default: null.

Merge pull request

Action ID: tools.github.merge_pull_request

Merge pull request. Calls PUT /repos/{owner}/{repo}/pulls/{pull_number}/merge directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

pull_number · integer · required

GitHub API path value for pull_number.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

payload · object | null

API-native request body passed through without validation. Body fields documented for PUT /repos/{owner}/{repo}/pulls/{pull_number}/merge: commit_title, commit_message, sha, merge_method.

Default: null.

Request security advisory cve

Action ID: tools.github.request_security_advisory_cve

Request security advisory cve. Calls POST /repos/{owner}/{repo}/security-advisories/{ghsa_id}/cve directly. Accepted OAuth scope: repo (default).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

ghsa_id · string · required

GitHub API path value for ghsa_id.

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

Rerun failed workflow jobs

Action ID: tools.github.rerun_failed_workflow_jobs

Rerun failed workflow jobs. Calls POST /repos/{owner}/{repo}/actions/runs/{run_id}/rerun-failed-jobs directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

run_id · integer · required

GitHub API path value for run_id.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

payload · object | null

API-native request body passed through without validation. Body fields documented for POST /repos/{owner}/{repo}/actions/runs/{run_id}/rerun-failed-jobs: enable_debug_logging.

Default: null.

Search code

Action ID: tools.github.search_code

Search code. Calls GET /search/code directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

q · string · required

The query contains one or more search keywords and qualifiers. Qualifiers allow you to limit your search to specific areas of GitHub. The REST API supports the same qualifiers as the web interface for GitHub. See Searching code for a detailed list of qualifiers.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

order · string | null

This field is closing down. Determines whether the first search result returned is the highest number of matches (desc) or lowest number of matches (asc). This parameter is ignored unless you provide sort.

Default: null.

page · integer | null

The page number of the results to fetch.

Default: null.

per_page · integer | null

The number of results per page (max 100).

Default: null.

sort · string | null

This field is closing down. Sorts the results of your query. Can only be indexed, which indicates how recently a file has been indexed by the GitHub search infrastructure. Default: best match

Default: null.

Search commits

Action ID: tools.github.search_commits

Search commits. Calls GET /search/commits directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

q · string · required

The query contains one or more search keywords and qualifiers. Qualifiers allow you to limit your search to specific areas of GitHub. The REST API supports the same qualifiers as the web interface for GitHub. See Searching commits for a detailed list of qualifiers.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

order · string | null

Determines whether the first search result returned is the highest number of matches (desc) or lowest number of matches (asc). This parameter is ignored unless you provide sort.

Default: null.

page · integer | null

The page number of the results to fetch.

Default: null.

per_page · integer | null

The number of results per page (max 100).

Default: null.

sort · string | null

Sorts the results of your query by author-date or committer-date. Default: best match

Default: null.

Search issues

Action ID: tools.github.search_issues

Search issues. Calls GET /search/issues directly. Accepted OAuth scopes: repo (default; omit only for public repository data). Pass advanced_search in params when GitHub requires it.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

q · string · required

The query contains one or more search keywords and qualifiers. Qualifiers allow you to limit your search to specific areas of GitHub. The REST API supports the same qualifiers as the web interface for GitHub. See Searching issues and pull requests for a detailed list of qualifiers.

advanced_search · string | null

Set to true to use advanced search.

Default: null.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

order · string | null

Determines whether the first search result returned is the highest number of matches (desc) or lowest number of matches (asc). This parameter is ignored unless you provide sort.

Default: null.

page · integer | null

The page number of the results to fetch.

Default: null.

per_page · integer | null

The number of results per page (max 100).

Default: null.

search_type · string | null

The type of search to perform on issues. When not specified, the default is lexical search. semantic performs a pure semantic (vector) search using embedding-based understanding. hybrid combines semantic search with lexical search for best results. Semantic and hybrid search require authentication and are rate limited to 10 requests per minute. Only applies to issue searches (/search/issues).

Default: null.

sort · string | null

Sorts the results of your query by the number of comments, reactions, reactions-+1, reactions—1, reactions-smile, reactions-thinking_face, reactions-heart, reactions-tada, or interactions. You can also sort results by how recently the items were created or updated, Default: best match

Default: null.

Search repositories

Action ID: tools.github.search_repositories

Search repositories. Calls GET /search/repositories directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

q · string · required

The query contains one or more search keywords and qualifiers. Qualifiers allow you to limit your search to specific areas of GitHub. The REST API supports the same qualifiers as the web interface for GitHub. See Searching for repositories for a detailed list of qualifiers.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

order · string | null

Determines whether the first search result returned is the highest number of matches (desc) or lowest number of matches (asc). This parameter is ignored unless you provide sort.

Default: null.

page · integer | null

The page number of the results to fetch.

Default: null.

per_page · integer | null

The number of results per page (max 100).

Default: null.

sort · string | null

Sorts the results of your query by number of stars, forks, or help-wanted-issues or how recently the items were updated. Default: best match

Default: null.

Submit private vulnerability report

Action ID: tools.github.submit_private_vulnerability_report

Submit private vulnerability report. Calls POST /repos/{owner}/{repo}/security-advisories/reports directly. Accepted OAuth scope: repo (default). The payload is GitHub’s native private report body and may include summary, description, severity, vulnerabilities, and CVE information; it is never converted into a public Issue.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

payload · object | null

API-native request body. Documented fields: description (required), summary (required), cvss_vector_string, cwe_ids, severity, start_private_fork, vulnerabilities.

Default: null.

Update branch protection

Action ID: tools.github.update_branch_protection

Update branch protection. Calls PUT /repos/{owner}/{repo}/branches/{branch}/protection directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

branch · string · required

GitHub API path value for branch.

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

payload · object | null

API-native request body. Documented fields: allow_deletions, allow_force_pushes, allow_fork_syncing, block_creations, enforce_admins, lock_branch, required_conversation_resolution, required_linear_history, required_pull_request_reviews, required_status_checks, restrictions.

Default: null.

Update code scanning alert

Action ID: tools.github.update_code_scanning_alert

Update code scanning alert. Calls PATCH /repos/{owner}/{repo}/code-scanning/alerts/{alert_number} directly. Accepted OAuth scopes: security_events plus repo for private repository access.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

alert_number · integer · required

GitHub API path value for alert_number.

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

payload · object | null

API-native request body. Documented fields: assignees, create_request, dismissed_comment, dismissed_reason, state.

Default: null.

Update code scanning default setup

Action ID: tools.github.update_code_scanning_default_setup

Update code scanning default setup. Calls PATCH /repos/{owner}/{repo}/code-scanning/default-setup directly. Accepted OAuth scopes: security_events plus repo for private repository access.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

payload · object | null

API-native request body. Documented fields: languages, query_suite, runner_label, runner_type, state, threat_model.

Default: null.

Update dependabot alert

Action ID: tools.github.update_dependabot_alert

Update dependabot alert. Calls PATCH /repos/{owner}/{repo}/dependabot/alerts/{alert_number} directly. Accepted OAuth scopes: security_events plus repo for private repository access.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

alert_number · integer · required

GitHub API path value for alert_number.

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

payload · object | null

API-native request body. Documented fields: agent_assignment, assignees, dismissed_comment, dismissed_reason, state.

Default: null.

Update issue

Action ID: tools.github.update_issue

Update issue. Calls PATCH /repos/{owner}/{repo}/issues/{issue_number} directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

issue_number · integer · required

GitHub API path value for issue_number.

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

payload · object | null

API-native request body passed through without validation. Body fields documented for PATCH /repos/{owner}/{repo}/issues/{issue_number}: title, body, assignee, state, state_reason, duplicate_issue_id, milestone, labels, assignees, issue_field_values, type.

Default: null.

Update pull request

Action ID: tools.github.update_pull_request

Update pull request. Calls PATCH /repos/{owner}/{repo}/pulls/{pull_number} directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

owner · string · required

GitHub API path value for owner.

pull_number · integer · required

GitHub API path value for pull_number.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

payload · object | null

API-native request body passed through without validation. Body fields documented for PATCH /repos/{owner}/{repo}/pulls/{pull_number}: title, body, state, base, maintainer_can_modify.

Default: null.

Update repository security advisory

Action ID: tools.github.update_repo_security_advisory

Update repository security advisory. Calls PATCH /repos/{owner}/{repo}/security-advisories/{ghsa_id} directly. Accepted OAuth scope: repo (default).

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

ghsa_id · string · required

GitHub API path value for ghsa_id.

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

payload · object | null

API-native request body. Documented fields: collaborating_teams, collaborating_users, credits, cve_id, cvss_vector_string, cwe_ids, description, severity, state, summary, vulnerabilities.

Default: null.

Update secret scanning alert

Action ID: tools.github.update_secret_scanning_alert

Update secret scanning alert. Calls PATCH /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number} directly. Accepted OAuth scopes: security_events plus repo for private repository access.

Reference: https://docs.github.com/en/rest

Secrets

Required secrets:

• github_oauth: OAuth token GITHUB_USER_TOKEN.

Input fields

alert_number · integer · required

GitHub API path value for alert_number.

owner · string · required

GitHub API path value for owner.

repo · string · required

GitHub API path value for repo.

base_url · string

GitHub.com REST API base URL.

Default: "https://api.github.com".

payload · object | null

API-native request body. Documented fields: assignee, resolution, resolution_comment, state, validity.

Default: null.