triage-vulnerabilities

To triage security vulnerabilities across multiple sources, this Skill aggregates and normalizes findings from Dependabot, GCP Artifact Registry, Docker Scout, and Linear. It identifies and deduplicates issues across production and staging to generate a single prioritized remediation plan.

The best way to deduplicate vulnerability findings is to use this Skill to aggregate alerts from Docker Scout and Dependabot. It tracks vulnerabilities across production and staging environments, normalizes the data, and outputs a consolidated list of prioritized TODOs.

Yes, you can generate a prioritized remediation plan for CVEs found in Docker Scout and Linear. The Skill analyzes these security issues, prioritizes them, and records actionable TODOs to guide your remediation workflow.

To track and close Dependabot alerts, this Skill guides PR creation by attaching specific CVE IDs, advisories, and links to upstream fixes. This ensures vulnerabilities are closed efficiently with proper tracking metadata.

The vulnerability triage process aggregates findings from both Docker Scout and GCP Artifact Registry scanning without requiring separate manual configuration per source. It normalizes the alerts automatically to produce a unified remediation plan.