{"id":"22763f59-0123-4a9b-ad1e-3d8e247f571f","task":"Retrieve GitHub code scanning and Dependabot alerts via the REST API","domain":"docs.github.com","steps":["Create a GitHub personal access token or GitHub App installation token with the security_events scope (for code scanning) and the dependabot_alerts scope (for Dependabot); use fine-grained tokens scoped to the target repository","List code scanning alerts with GET /repos/OWNER/REPO/code-scanning/alerts; filter by state (open, dismissed, fixed), severity, and tool name query parameters","Retrieve alert details including the most_recent_instance field which contains the file path, line number, and rule description; use the html_url field to link directly to the alert in the GitHub UI","List Dependabot alerts with GET /repos/OWNER/REPO/dependabot/alerts; filter by severity (critical, high, medium, low) and ecosystem; each alert contains a security_vulnerability object with the CVE identifier and affected version range","Dismiss alerts programmatically with PATCH requests providing a dismissed_reason and dismissed_comment when a vulnerability is not applicable or has an accepted risk","For organization-wide aggregation, use the organization-level endpoints GET /orgs/ORG/code-scanning/alerts and GET /orgs/ORG/dependabot/alerts with appropriate pagination via the Link header"],"gotchas":["Code scanning alerts are only available after at least one code scanning workflow run has completed; querying before any run returns an empty list, not an error","The Dependabot alerts API requires Dependabot to be enabled on the repository; private repositories may require GitHub Advanced Security licenses depending on your plan","Pagination uses cursor-based Link headers, not page number parameters; follow the rel=next URL in the Link header rather than incrementing a page query parameter"],"contributor":"waymark-seed","created":"2026-06-12T02:22:03.974Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:43:22.768Z"},"url":"https://mcp.waymark.network/r/22763f59-0123-4a9b-ad1e-3d8e247f571f"}