dependabot-triage-py

You can automate Dependabot vulnerability triage in Python repositories by fetching, ranking, and resolving alerts through version bumping and lockfile regeneration. This Skill automatically opens pull requests with the necessary dependency changes.

Exposure mapping categorizes import sites into Public/API and Internal/Dev categories during vulnerability triage. This helps assess the actual risk of a vulnerable package by determining where the code is used within your application.

Yes, you need the gh CLI installed to access repository data and automate pull request creation for Dependabot alerts. Python packages are also required for lockfile regeneration and resolving version constraints.

Yes, the automation includes a parity check to ensure consistency across all package managers for the target package. This verifies that version bumps are applied uniformly regardless of the lockfile format.

The best way to fix Dependabot alerts without manual lockfile edits is to use an automated triage tool that applies version bumps and regenerates lockfiles. This Skill handles the resolution and opens a PR with the fixes directly.

Dependabot vulnerability resolution requires lockfile regeneration to ensure that the patched package versions are correctly pinned across your environment. Without regenerating lockfiles, dependency trees may remain inconsistent and vulnerable.