Sign in Create free account

Bot recipe · Engineering

Security alerts digest.

Summarizes Dependabot, code scanning, and secret scanning alerts across repositories, worst first.

Create free account

Free: 30 answers a day, plus 300 trial credits for every other model. No card.

GitHub Chat with Work
On a schedule Shared with a project Changes as you allow

It starts

  • On a schedule
  • Every monday at 8:00

It works with

Its changes

Opening issues asks.

Its instructions

What it's told, word for word.

The bot reads these on every run. Change them before it starts, or any time after.

List open alerts by severity across the chosen repositories. Merge alerts for the same advisory. Say which have a fix version. Propose one issue per critical alert.
Conversations
A new conversation each week.
Credits
About 5 to 20 credits a run, at the model's own rate.
Who sees it
Shared in a project: everyone on it sees the bot and reads its conversations.

Engineering

More recipes like it.

  • GitHub issue triage

    Labels new issues from your set, links duplicates, asks for what's missing, and otherwise stays quiet.

    GitHub repository events GitHub

  • Answers from the code

    Answers questions in issues and discussions from the repository's own code and docs, Copilot style.

    GitHub repository events GitHub

  • Pull request reviewer

    Reviews each pull request against the repository's conventions and leaves one review, not a stream of nits.

    GitHub repository events GitHub

  • Issue fixer on a computer

    Turns an issue a maintainer labels into a draft pull request, running the tests on a computer the team lends it.

    GitHub repository events GitHub

  • Small fix pull requests

    Turns an issue a maintainer labels into a small draft pull request, written from a copy of the code in the chat.

    GitHub repository events GitHub

  • Release notes drafter

    Drafts release notes in the style of the last two releases when a tag or draft release appears.

    GitHub repository events GitHub

  • Flaky test hunter

    Finds tests that fail and pass on the same commit across the week's CI runs, and keeps one issue up to date.

    On a schedule GitHub

  • CI doctor

    Explains why a pull request's CI failed and what to change, in one comment.

    GitHub repository events GitHub

  • Dependency update reviewer

    Reads each Dependabot or Renovate pull request's changelog and says whether it's safe.

    GitHub repository events GitHub

  • Dependency upgrader on a computer

    Upgrades outdated dependencies weekly, runs the tests, and opens one pull request.

    On a schedule GitHub

  • Bugsink incident summary

    Summarizes new errors with their stack trace and the likely commit, and posts it where the team looks.

    On a schedule GitHub Bugsink Slack

  • Bugsink noise keeper

    Resolves errors the latest release fixed and proposes muting known noise.

    On a schedule GitHub Bugsink

  • Linear triage

    Sets team, labels, and priority on new Linear issues, and finds duplicates.

    On a schedule Linear

  • Engineering standup

    Writes your standup from what you did in GitHub and Linear yesterday.

    On a schedule GitHub Linear

  • Stale pull request nudger

    Lists pull requests waiting on review for more than two days, and who they wait on.

    On a schedule GitHub Slack Basecamp

  • On-call handoff

    Writes the weekly on-call handoff from incidents, errors, and open issues.

    On a schedule GitHub Bugsink

  • Docs drift checker

    After each merge to main, checks whether the docs still describe the code, and opens one issue when not.

    GitHub repository events GitHub

  • Customer changelog writer

    Turns each release into a customer-facing changelog entry in your help center or Notion.

    GitHub repository events GitHub Notion

Start from this recipe.

Sign up, open Bots, and pick Security alerts digest. Every part of it stays yours to change.

Create free account All recipes

Free: 30 answers a day, plus 300 trial credits for every other model. No card.