gh-code-scanning Skill
Retrieves and groups GitHub code scanning alerts by rule and severity using the gh CLI Published by microsoft in hve-core.
Decision snapshot
Is this a fit?
Security review, Data analysis, Includes SKILL.md, Reusable instructions
Compatibility not yet detected.
Permission behavior not yet detected.
Copy skill directory
2 months ago · MIT license
No specific cautions were detected. Review the source and requested permissions before installing.
What is gh-code-scanning Skill?
Retrieves and groups GitHub code scanning alerts by rule and severity using the gh CLI Published by microsoft in hve-core. This profile combines repository metadata with install, compatibility, and usage signals so developers can quickly decide whether it fits their agent workflow before opening the source repository.
Automated repository signals based on public metadata such as recency, license, installation evidence, and adoption. These are not a security audit or endorsement. See how SkillIndex evaluates profiles.
Key capabilities
- Includes SKILL.md support
- Reusable instructions support
- Security review
- Data analysis
- Security review use cases
- Data analysis use cases
Declared skill metadata
- Declared license: MIT
- Compatibility: Requires pwsh 7+ and gh CLI authenticated with the securityevents scope. Bash script requires jq.
- Source file: .github/skills/github/gh-code-scanning/SKILL.md
These fields retain source and confidence evidence from the indexed SKILL.md.
Compatibility and setup
- Install or run with Copy skill directory
When to use gh-code-scanning Skill
- Use it for security review.
- Use it for data analysis.
Built with
Editorial notes
Source
- Creator: microsoft
- Repository: microsoft/hve-core
- Skill file: .github/skills/github/gh-code-scanning/SKILL.md
What it does
Retrieves and groups GitHub code scanning alerts by rule and severity using the gh CLI
Skill instructions
GitHub Code Scanning Skill Overview GitHub code scanning alerts are produced by static analysis tools such as CodeQL and Scorecard and surfaced in the GitHub Security tab. The GitHub Security tab is not accessible through the default MCP toolset, so this skill provides scripts for all read operations. Prerequisites | Requirement | Details | |-------------|-------------------------------------------------------------------------| | pwsh | PowerShell 7+; install from <https://learn.microsoft.com/powershell | | gh CLI | Installed and on PATH; install from <https://cli.github.com | | Auth | Run gh auth login or set GHTOKEN; requires securityevents scope | | Scope | securityevents for private repos; publicrepo for public-only | The repo scope also satisfies securityevents. The gh CLI handles authentication automatically; no explicit token passing is needed in commands. Get-CodeScanningAlerts.ps1 validates both prerequisites at startup and aborts with a targeted error message if either check
Verified compatibility and discovery
Frequently asked questions
What is gh-code-scanning?
gh-code-scanning is a open-source AI agent skill with Copy skill directory. Retrieves and groups GitHub code scanning alerts by rule and severity using the gh CLI
Who is gh-code-scanning best for?
gh-code-scanning is best for reusing agent instructions, scripts, and references, security review workflows, data analysis workflows.
How do I install gh-code-scanning?
Install or run gh-code-scanning using Copy skill directory. Check gh-code-scanning for the latest setup command.
Is gh-code-scanning actively maintained?
gh-code-scanning may need a closer maintenance check before production use.
Project health auto-fetched from the source repository.
Maintain this resource?
Review this source-backed profile, send a correction with evidence, or link to it from your documentation. Claims verify your relationship to the project; profile facts still require source evidence and editorial review.
