skills.rest
Unique-AG
Unique-AGOFFICIAL
Explore all skills by this author →
GitHub

security-maintenance

Triage Dependabot alerts and CodeQL findings to remediate security vulnerabilities.

5|3|Updated Jun 18, 2024
Search Tags:#automation#security#maintenance#vulnerabilities#triage#codeql#dependabot
One-click install
npx skills add https://github.com/Unique-AG/ai --skill security-maintenance
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-maintenance
Source: https://github.com/Unique-AG/ai/tree/main/.claude/skills/security-maintenance
Command: npx skills add https://github.com/Unique-AG/ai --skill security-maintenance

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Triage and fix security vulnerabilities in the ai repository to reduce exposure and prevent security incidents.

Core Features & Use Cases

  • Dependabot workflow — manage, prune, and apply fixes via constrained dependencies; avoid merging Dependabot auto-PRs.
  • CodeQL workflow — review findings and implement code changes to close vulnerabilities.
  • Batch session management — run consolidated security maintenance across alerts and findings with clear audit trails.

Quick Start

Initiate a security maintenance session to review all open Dependabot alerts and CodeQL findings and apply safe fixes using the defined workflow.

Frequently Asked Questions about security-maintenance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I triage security vulnerabilities in a repository with Dependabot and CodeQL?▼

Triage security vulnerabilities by reviewing Dependabot alerts and CodeQL findings, applying fixes via constrained dependencies, re-locking affected packages, and pruning stale overrides to ensure auditable remediation.

What is the best way to manage Dependabot alerts without merging auto-PRs?▼

Manage Dependabot alerts by triaging findings, applying fixes through constrained dependencies, and re-locking packages, avoiding auto-PR merges to maintain an auditable security maintenance workflow.

Can I batch multiple security alerts and CodeQL findings into one maintenance session?▼

Yes, you can run consolidated security maintenance sessions that batch Dependabot alerts and CodeQL findings together, applying safe fixes with clear audit trails across the repository.

How do I fix CodeQL findings by changing code instead of dismissing them?▼

Fix CodeQL findings by reviewing the reported vulnerabilities and implementing targeted code changes to close the security gaps, operating within defined workflows for repeatable remediation.

When should I use per-package overrides for security maintenance?▼

Use per-package overrides during security maintenance when standard constrained dependency fixes are insufficient, ensuring you prune stale overrides regularly to maintain an auditable remediation state.

Does this security maintenance workflow support dependency re-locking after applying fixes?▼

Yes, the security maintenance workflow applies vulnerability fixes via constrained dependencies and re-locks dependencies to ensure the repository's lockfile reflects the remediated packages.

Related Skills

Explore More Software Engineering Skills→
gobifrostgobifrost
55

bifrost-secupdate

Automate triage and resolution of GitHub security artifacts for Bifrost.

Official
Advanced
Sheldon-92Sheldon-92
3

Testing

Execute test suites and report failures with coverage metrics.

Community
Intermediate
Mo7amed-MahmoudMo7amed-Mahmoud

security_scan

Run parallel dependency, static, and privacy scans and emit severity findings.

Community
Advanced
unclehowellunclehowell

github-pr-workflow

Create, update, and merge GitHub pull requests via CLI or REST API.

Community
Advanced