graphql-audit

Triage GitHub Code Scanning alerts via REST and GraphQL.

80.1k|6.6k|Updated Jun 17, 2013
One-click install
npx skills add https://github.com/netdata/netdata --skill graphql-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: graphql-audit
Source: https://github.com/netdata/netdata/tree/main/.agents/skills/graphql-audit
Command: npx skills add https://github.com/netdata/netdata --skill graphql-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires gh, jq, git, and includes scripts (resource) components.

What problem does it solve?

This skill helps teams triage GitHub Code Scanning alerts by surfacing open findings and enabling rapid dismissal or remediation actions across repositories.

Core Features & Use Cases

  • List open CodeQL alerts across the repository using REST and GraphQL.
  • Inspect individual alerts and apply dismiss reasons such as false positive, won't fix, or used in tests.
  • Dismissing can be automated or guided via scripts and supports bulk operations.
  • Works with the gh CLI credentials stored locally; no token required in .env.

Quick Start

Run codeql-list.sh to view open alerts for the repository.

Frequently Asked Questions about graphql-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I list open GitHub Code Scanning alerts for a repository?

To list open GitHub Code Scanning alerts, you can use this Skill to query CodeQL findings via REST and GraphQL. It automatically derives the owner and repository from your local git remotes to surface open alerts.

How do I dismiss CodeQL alerts in bulk on GitHub?

You can dismiss CodeQL alerts in bulk using this Skill's dismissal scripts. It supports applying dismiss reasons like false positive, won't fix, or used in tests across multiple findings simultaneously.

Do I need to configure a GitHub token to triage Code Scanning alerts?

No token configuration is required for triaging Code Scanning alerts. This Skill relies on the gh CLI with stored credentials locally, handling authentication automatically without needing a token in your environment.

Can I inspect a single GitHub Code Scanning alert before dismissing it?

Yes, you can inspect individual GitHub Code Scanning alerts. This Skill allows you to review specific findings and apply targeted dismiss reasons such as false positive or won't fix before taking action.

What's the best way to automate CodeQL alert triage across repositories?

Automating CodeQL alert triage is best handled by using this Skill's scripts to list open findings and apply bulk dismissals. It leverages gh, jq, and git to manage alerts directly from your repository remotes.