| { |
| "name": "check_dependency_vulnerabilities", |
| "description": "Check a list of dependencies for known vulnerabilities using the GitHub Security Advisory Database.\nThis tool queries the GitHub Advisory Database to find known security vulnerabilities affecting the specified packages.\n\nUse this tool when:\n- You want to check if project dependencies have known vulnerabilities\n- You are adding a new dependency to a project and should check it is safe before adding to the project\n\nThe tool accepts owner, repo, and a list of dependencies with their ecosystems and versions, then returns any matching security advisories with upgrade recommendations where available.", |
| "inputSchema": { |
| "type": "object", |
| "properties": { |
| "dependencies": { |
| "type": "array", |
| "items": { |
| "type": "object", |
| "properties": { |
| "ecosystem": { |
| "type": "string", |
| "description": "Package ecosystem", |
| "enum": [ |
| "npm", |
| "pip", |
| "maven", |
| "nuget", |
| "composer", |
| "pub", |
| "actions", |
| "bundler", |
| "gomod", |
| "cargo", |
| "hex" |
| ] |
| }, |
| "name": { |
| "type": "string", |
| "description": "Package name" |
| }, |
| "version": { |
| "type": "string", |
| "description": "Package version" |
| } |
| }, |
| "required": [ |
| "name", |
| "version", |
| "ecosystem" |
| ] |
| }, |
| "description": "List of dependencies to check for vulnerabilities" |
| }, |
| "owner": { |
| "type": "string", |
| "description": "Repository owner (username or organization)" |
| }, |
| "repo": { |
| "type": "string", |
| "description": "Repository name" |
| } |
| }, |
| "required": [ |
| "owner", |
| "repo", |
| "dependencies" |
| ] |
| } |
| } |
