OpenParable
Skip to content
← Back to skills

Close Dependabot

DevOps & Security
close-dependabot

Close Dependabot is an Agent Skill for devops & security published in the ModelEngine-Group/fit-framework repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.

关闭 Dependabot 安全告警，需提供合理理由。当用户要求关闭 Dependabot 告警、dismiss Dependabot 告警时触发。参数为告警编号。

View on GitHub ↗
QUICK START

How to use this skill

Bring this guide into your coding agent with a prompt tailored to the tool you use.

  1. Open your project in Codex.
  2. Copy and paste the prompt below.
  3. Review files and risks before approving any action.
Prompt to paste
Inspect the Agent Skill at https://github.com/ModelEngine-Group/fit-framework/blob/HEAD/.agents/skills/close-dependabot/SKILL.md and all supporting files. Report provenance, permissions, scripts, dependencies, and security risks. Propose an exact installation into .agents/skills/close-dependabot, but wait for my approval before writing files or running scripts.

Copying this prompt does not install or run the skill. Review third-party files before use.

关闭安全告警

执行步骤

  1. 获取安全告警信息:

    gh api "repos/{owner}/{repo}/dependabot/alerts/<alert-number>"

  2. 展示告警详情（严重程度、漏洞、受影响包、修复版本）。

  3. 询问关闭理由:

    1. 误报（False Positive）
    2. 无法利用（Not Exploitable）
    3. 已有缓解措施（Mitigated）
    4. 无修复版本且风险可接受
    5. 测试或开发依赖（Dev Only）

  4. 要求详细说明（最少 20 个字符）。

  5. 最终确认后执行关闭:

    gh api --method PATCH "repos/{owner}/{repo}/dependabot/alerts/<alert-number>" -f state=dismissed -f dismissed_reason="<reason>" -f dismissed_comment="<comment>"

注意: 谨慎关闭高危告警，优先考虑修复。建议先使用 analyze-dependabot 进行详细分析。