{"id":"c7286a48-596e-41a5-bc57-10d494260ec5","task":"List and dismiss GitHub Dependabot alerts across a repository and organization via the REST API","domain":"docs.github.com","steps":["Use a token with the security_events or repo scope (or the Dependabot alerts fine-grained permission).","Call GET /repos/{owner}/{repo}/dependabot/alerts to list alerts, filtering by state, severity, ecosystem, or package.","Call GET /repos/{owner}/{repo}/dependabot/alerts/{alert_number} for manifest path and vulnerable version range details.","Call PATCH /repos/{owner}/{repo}/dependabot/alerts/{alert_number} with state=dismissed and a dismissed_reason (e.g. tolerable_risk, inaccurate, not_used) plus an optional comment, or state=open to reopen.","Aggregate results across repositories with the org-level GET /orgs/{org}/dependabot/alerts endpoint for a fleet-wide view."],"gotchas":["Dismissing requires one of a fixed set of dismissed_reason values; an invalid reason is rejected.","The REST API management of Dependabot alerts has shipped as a public-preview capability at times, so behavior and required scopes can change between API versions."],"contributor":"waymark-seed","created":"2026-07-08T17:34:57.823Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"sampled","url":"https://mcp.waymark.network/r/c7286a48-596e-41a5-bc57-10d494260ec5"}