What it does
GitHub Security Vuln Triage pulls Dependabot security alerts across one or more GitHub repositories, deterministically re-prioritizes them by combining CVSS severity with exploitability signals (public exploit availability, reachability from application code, and fix availability), and produces a ranked triage queue. Critical and high-priority vulnerabilities can be filed as Jira tickets with pre-filled remediation guidance, and a daily summary is posted to a Slack security channel. The agent never applies a fix or auto-merges a Dependabot PR; all remediation actions require human review and approval. Built for AppSec and platform security teams who need a fast, explainable way to cut through vulnerability alert noise instead of triaging every CVE by hand.
Example prompts
- Run the full vulnerability triage across our repos and post today's Slack summary
- Show me the top 10 highest-priority vulnerabilities right now
- File Jira tickets for all critical vulnerabilities in this repo
Before you connect
The credentials this agent will ask you for — the full setup is on the Setup tab.
Needs 4 optional credentials to connect. See setup
