# Close Dependabot

> Close Dependabot is an Agent Skill for devops & security published in the ModelEngine-Group/fit-framework repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.

关闭 Dependabot 安全告警，需提供合理理由。当用户要求关闭 Dependabot 告警、dismiss Dependabot 告警时触发。参数为告警编号。

- Skill name: `close-dependabot`
- Category: [DevOps & Security](https://www.openparable.com/skill/devops-security/1)
- Source: https://github.com/ModelEngine-Group/fit-framework/blob/HEAD/.agents/skills/close-dependabot/SKILL.md
- Repository: ModelEngine-Group/fit-framework (2,110 GitHub stars when collected)

## SKILL.md

# 关闭安全告警

## 执行步骤

1. 获取安全告警信息:
   ```bash
   gh api "repos/{owner}/{repo}/dependabot/alerts/<alert-number>"
   ```

2. 展示告警详情（严重程度、漏洞、受影响包、修复版本）。

3. 询问关闭理由:
   1. 误报（False Positive）
   2. 无法利用（Not Exploitable）
   3. 已有缓解措施（Mitigated）
   4. 无修复版本且风险可接受
   5. 测试或开发依赖（Dev Only）

4. 要求详细说明（最少 20 个字符）。

5. 最终确认后执行关闭:
   ```bash
   gh api --method PATCH "repos/{owner}/{repo}/dependabot/alerts/<alert-number>" -f state=dismissed -f dismissed_reason="<reason>" -f dismissed_comment="<comment>"
   ```

**注意**: 谨慎关闭高危告警，优先考虑修复。建议先使用 analyze-dependabot 进行详细分析。

---

Source: https://www.openparable.com/skill/devops-security/close-dependabot (OpenParable). Cite the canonical URL above.