Code scanning — ChatGPT prompt: security analysis
This prompt reviews GHAS alerts across repositories, separates dependency and base-image causes, and prioritizes remediation by severity and exposure.
Open on GitHubWhat Analyze code scanning security issues and dependency updates if vulnerable does
Use the prompt to examine code scanning findings and GHAS alerts across repositories. It separates dependency issues from base-image root causes, then looks for vulnerability patterns that appear repeatedly. The analysis is aimed at deciding which findings deserve attention first.
Remediation is prioritized by severity and exposure. That means a base-image finding should be checked separately from a dependency update before choosing a fix. The prompt is available for use with ChatGPT and Claude.ai.
What it helps with
- review GHAS alerts across repositories
- separate dependency issues from base-image causes
- detect repeated vulnerability patterns
- prioritize remediation by severity and exposure
Example prompts for the agent
- Analyze GHAS alerts across these repositories and group repeated vulnerability patterns.
- Identify whether this issue comes from a dependency or a base image.
- Prioritize the remediation work using severity and exposure.
How to install Analyze code scanning security issues and dependency updates if vulnerable
How to use
Paste the text at the start of a chat or into project instructions
Manually: put the files in place
.claude/commands/prompts.csv.mdQuestions about Analyze code scanning security issues and dependency updates if vulnerable
How do I install this prompt in ChatGPT?
Open ChatGPT and paste the prompt into a new conversation. Provide the GHAS alerts and repository context you want it to analyze.
What does this prompt do?
It reviews code scanning and GHAS alerts, separates dependency issues from base-image root causes, detects repeated vulnerability patterns, and prioritizes remediation.
Does this prompt work with Claude.ai?
Yes. The prompt is intended for use with ChatGPT and Claude.ai.
Source text
prompts.csv · CC0-1.0
this is for repo Analyze code scanning security issues and dependency updates if vulnerable Analyze GHAS alerts across repositories Identify dependency vs base image root causes Detect repeated vulnerability patterns Prioritize remediation based on severity and exposure
© [email protected] · CC0-1.0 · f/prompts.chat
