actionsCreate, modify, review, and debug GitHub Actions workflows and custom actions with least-privilege permissions and a clear trust boundary. Use when editing .github/workflows/*.yml, action.yml, or .github/actions/, choosing action versions, or diagnosing a failed or stuck run, including when the user
code-securityConfigure and triage GitHub's security features with gh. Covers secret scanning, push protection and blocked-push recovery, paths-ignore exclusions, delegated bypass, private vulnerability reporting, and alert triage for secret scanning, code scanning, and Dependabot. Use when enabling these feature
dependabot-prsSweep a repo's open Dependabot pull requests: group them by ecosystem, merge the green ones one at a time, ask Dependabot to rebase stale ones, rerun flaky checks, and report red ones with a result table. Use when asked to \"merge the dependabot PRs\", \"run through the dependabot PRs\", or clear a
dependabotConfigure, review, and troubleshoot GitHub Dependabot version and security updates. Use when editing .github/dependabot.yml, adding ecosystems, groups, ignore/allow rules, or private registries, or diagnosing missing or unexpected Dependabot PRs and alerts. Not for general GitHub Actions workflows (
repo-setupAudit and set up a GitHub repository's surface with gh. Covers label taxonomy, issue forms, PR template, CODEOWNERS, SECURITY.md, CONTRIBUTING.md, and branch or tag rulesets, with a dry-run plan and an applied/skipped/failed report. Use when creating or tidying a repo, or when asked to add rulesets,