dependabot_list_alerts - Charter Docs

GET

github_dependabot_list_alerts.py

import asyncio

from charter.packs import github

result = asyncio.run(github.dependabot_list_alerts.ainvoke({"owner": ..., "repo": ...}))

Requires security_events or repo. With github.APP or github.FINE_GRAINED, requires vulnerability_alerts=read or vulnerability_alerts=write.

Path parameters

Field	Type	Description
`owner` *	`string`	The account owner of the repository. The name is not case sensitive.
`repo` *	`string`	The name of the repository without the `.git` extension. The name is not case sensitive.

Query parameters

Field	Type	Description
`state`	`string`	A comma-separated list of states. If specified, only alerts with these states will be returned. Can be: `auto_dismissed`, `dismissed`, `fixed`, `open`.
`severity`	`string`	A comma-separated list of severities. Can be: `low`, `medium`, `high`, `critical`.
`ecosystem`	`string`	A comma-separated list of ecosystems. Can be: `composer`, `go`, `maven`, `npm`, `nuget`, `pip`, `pub`, `rubygems`, `rust`.
`package`	`string`	A comma-separated list of package names to restrict the results to.
`manifest`	`string`	A comma-separated list of full manifest paths.
`classification`	`string`	A comma-separated list of vulnerability classifications. Can be: `malware`, `general`.
`epssPercentage`	`string`	Filter by EPSS percentage — the estimated probability of exploitation. An exact number, a comparator such as `>0.5`, or a range `0.1..0.4`, with values from 0.0 to 1.0.
`has`	`string`	Only alerts with the given property. Currently only `patch` is supported, which restricts results to alerts that have a fix available.
`assignee`	`string`	Filter alerts by assignees, as a comma-separated list of user handles. Use `*` for alerts with at least one assignee or `none` for alerts with no assignees.
`scope`	DependabotScope	The scope of the vulnerable dependency. `runtime` is what ships; `development` is what only the build sees.
`relationship`	`string`	A comma-separated list of relationships of the vulnerable dependency to your project. Can be: `unknown`, `direct`, `transitive`, `inconclusive`.
`sort`	DependabotSort	The property by which to sort the results. `created` means when the alert was created. `updated` means when the alert’s state last changed. `epss_percentage` sorts by estimated exploitation probability. GitHub uses `created` when this is absent.
`direction`	SortDirection	The direction to sort the results by. GitHub uses `desc` when this is absent.
`perPage`	`integer`	The number of results to return (max 100). Defaults to 30. ≥ 1; ≤ 100