> ## Documentation Index
> Fetch the complete documentation index at: https://docs.r28.ai/charter/llms.txt
> Use this file to discover all available pages before exploring further.

# dependabot_list_alerts

> List a repository's Dependabot alerts: which dependency, how severe, and the first version that fixes it. Several filters take a comma-separated list, so `state='open,dismissed'` is valid. Needs the `security_events` scope. This endpoint has no page parameter — raise `per_page` rather than paging.

<div className="tool-route"><span className="tool-row-method" data-method="GET">GET</span><code>{"https://api.github.com/repos/{owner}/{repo}/dependabot/alerts"}</code></div>

```python github_dependabot_list_alerts.py theme={null}
from charter.packs import github

result = await github.dependabot_list_alerts.ainvoke({"owner": ..., "repo": ...})
```

<Note>
  Requires `repo`, `read:user`.
</Note>

## Path parameters

<div className="reference-table">
  | Field                                                         | Type     | Description                                                                              |
  | ------------------------------------------------------------- | -------- | ---------------------------------------------------------------------------------------- |
  | `owner` <span className="required" title="required">\*</span> | `string` | The account owner of the repository. The name is not case sensitive.                     |
  | `repo` <span className="required" title="required">\*</span>  | `string` | The name of the repository without the `.git` extension. The name is not case sensitive. |
</div>

## Query parameters

<div className="reference-table">
  | Field            | Type                                                                        | Description                                                                                                                                                                                                                                           |
  | ---------------- | --------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
  | `state`          | `string`                                                                    | A comma-separated list of states. If specified, only alerts with these states will be returned. Can be: `auto_dismissed`, `dismissed`, `fixed`, `open`.                                                                                               |
  | `severity`       | `string`                                                                    | A comma-separated list of severities. Can be: `low`, `medium`, `high`, `critical`.                                                                                                                                                                    |
  | `ecosystem`      | `string`                                                                    | A comma-separated list of ecosystems. Can be: `composer`, `go`, `maven`, `npm`, `nuget`, `pip`, `pub`, `rubygems`, `rust`.                                                                                                                            |
  | `package`        | `string`                                                                    | A comma-separated list of package names to restrict the results to.                                                                                                                                                                                   |
  | `manifest`       | `string`                                                                    | A comma-separated list of full manifest paths.                                                                                                                                                                                                        |
  | `classification` | `string`                                                                    | A comma-separated list of vulnerability classifications. Can be: `malware`, `general`.                                                                                                                                                                |
  | `epssPercentage` | `string`                                                                    | Filter by EPSS percentage — the estimated probability of exploitation. An exact number, a comparator such as `&gt;0.5`, or a range `0.1..0.4`, with values from 0.0 to 1.0.                                                                           |
  | `has`            | `string`                                                                    | Only alerts with the given property. Currently only `patch` is supported, which restricts results to alerts that have a fix available.                                                                                                                |
  | `assignee`       | `string`                                                                    | Filter alerts by assignees, as a comma-separated list of user handles. Use `*` for alerts with at least one assignee or `none` for alerts with no assignees.                                                                                          |
  | `scope`          | [DependabotScope](/charter/charter/packs/github/monitoring/objects#dependabotscope) | The scope of the vulnerable dependency. `runtime` is what ships; `development` is what only the build sees.                                                                                                                                           |
  | `relationship`   | `string`                                                                    | A comma-separated list of relationships of the vulnerable dependency to your project. Can be: `unknown`, `direct`, `transitive`, `inconclusive`.                                                                                                      |
  | `sort`           | [DependabotSort](/charter/charter/packs/github/monitoring/objects#dependabotsort)   | The property by which to sort the results. `created` means when the alert was created. `updated` means when the alert's state last changed. `epss_percentage` sorts by estimated exploitation probability. GitHub uses `created` when this is absent. |
  | `direction`      | [SortDirection](/charter/charter/packs/github/issues/objects#sortdirection)         | The direction to sort the results by. GitHub uses `desc` when this is absent.                                                                                                                                                                         |
  | `perPage`        | `integer`                                                                   | The number of results to return (max 100). Defaults to 30. <span className="field-constraints">≥ 1; ≤ 100</span>                                                                                                                                      |
</div>