Skills
.Work. You
Rest

fix-grype-tf

Community

Auto-fix Grype scan failures across repos.

Software Engineering#automation#devops#vulnerability#github#remediation#pull-request#grype
Authorj4hr3n
Version1.0.0
Installs0

System Documentation

What problem does it solve?

Auto-fixes vulnerabilities surfaced by the Grype Org Scan for Techfolk-AS, reducing manual remediation time by automatically applying recommended dependency updates and creating PRs per affected repository while skipping those with an existing fix PR.

Core Features & Use Cases

  • End-to-end remediation: fetches the latest failing Grype run (or a provided run ID), extracts affected repos and fixed_in versions, and prepares per-repo bumps across ecosystems (Go, npm, Python, Java).
  • Automated PR creation and validation: pushes fix branches, runs local/build validations, and opens one PR per repository, excluding repos that already have an open fix PR.
  • Operates on Techfolk-AS GitHub org: tailored to the workflow and naming conventions of Techfolk-AS.

Quick Start

Run the /fix-grype-tf command to start the auto-fix workflow.

Dependency Matrix

Required Modules

None required

Components

Standard package

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: fix-grype-tf
Download link: https://github.com/j4hr3n/dotfiles/archive/main.zip#fix-grype-tf

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.