github-mcp-server
github-mcp-server copied to clipboard
feat: implement Dependabot security update tools
Closes: #176
Description
This PR implements tools for managing Dependabot security updates in repositories. The implementation includes:
GetSecuritySettings- Retrieves security settings for a repositoryUpdateSecuritySettings- Updates security settings for a repositoryGetDependabotSecurityUpdatesStatus- Checks if Dependabot security updates are enabled
Implementation Details
During implementation, I encountered an issue with GitHub's API behavior:
- Public repositories should have Dependabot alerts enabled by default
- However, the API still requires explicit enabling of vulnerability alerts
- This creates a confusing user experience where the system says one thing but behaves differently
As a result, I've:
- Implemented the core functionality for managing security settings
- Documented the API behavior discrepancy in the code
- Commented out the
EnableDependabotSecurityUpdatesandDisableDependabotSecurityUpdatestools for future investigation.