dependabot-triage — GitHub Copilot plugin: what it does
Gathers active Dependabot alerts into a Copilot canvas, groups them by package, and helps merge fixes into a single PR.
copilot plugin install dependabot-triage@awesome-copilotWhat dependabot-triage does
The plugin introduces an interactive canvas in the Copilot app to manage security notifications. It fetches open Dependabot alerts and groups them by affected package. Alerts can be filtered or sorted by severity and status.
You can trigger updates or ignore dependencies directly from the interface. When multiple notices target the same library, the canvas combines them into one pull request. It also flags whether a pull request addresses a security advisory.
Each alert can launch an investigation session in Copilot. The canvas only tracks active alerts, so clear repositories will show an empty board.
What it helps with
- group open Dependabot alerts by affected dependency
- bundle multiple security warnings into a single pull request
- filter and sort dependency notices by severity and status
- start an investigation session in Copilot directly from an alert
Example prompts for the agent
- Show open Dependabot alerts and group them by affected dependency.
- Bundle open Dependabot notices for this library into a single pull request.
- Start a Copilot session to analyze this Dependabot security alert.
How to install dependabot-triage
Command from the source
copilot plugin install dependabot-triage@awesome-copilotStep by step, with commands for each platform: Claude Code plugins: marketplaces, installing, and building your own
Questions about dependabot-triage
How to install dependabot-triage in GitHub Copilot?
Run copilot plugin install dependabot-triage@awesome-copilot in your terminal. Alternatively, open **Customise** in the Copilot app, navigate to plugins, find "Dependabot Triage Canvas" under Awesome Copilot, and enable it.
What does dependabot-triage do?
It adds a triage canvas inside the Copilot app. The tool groups Dependabot alerts by dependency, filters them by severity, and helps combine fixes into a single pull request.
Can I investigate specific alerts with Copilot chat?
Yes, you can launch a Copilot session directly from any alert card on the canvas to inspect the vulnerability in detail.
Source text
SKILL.md · MIT
## Dependabot Triage Canvas A GitHub Copilot app canvas for managing and triaging Dependabot alerts.  ## Features - Show all currently open Dependabot alerts - Alerts are grouped by the dependency they affect - Combine alerts for the same dependency into a single PR - Provides quick actions to update or ignore dependencies - Supports filtering and sorting of alerts based on severity and status - Show if a PR is related to a security alert - Start a session from an alert in Copilot for additional analysis ## Getting Started To get started with the Dependabot Triage Canvas, follow these steps: 1. Open **Customise** in the Copilot app and navigate to plugins. 2. Search for "Dependabot Triage Canvas" under **Awesome Copilot** and enable the plugin. 3. Once enabled, you can access the canvas from the Copilot app interface. ## License This project is licensed under the MIT License. See the [LICENSE](LICENSE) file for details.
© Aaron Powell · MIT · aaronpowell/github-copilot-dependabot-canvas
