id: github
name: GitHub
version: 1.0.0
description: "GitHub (REST API) — code security and issue tracking: list secret-scanning, code-scanning and Dependabot alerts for a repository, read a repository, and create an issue. Personal-access-token authentication; stdlib-only, no extra Python dependencies."
changelog: "1.0.0 — Initial release: list secret/code/Dependabot alerts, get repo, create issue."
category: devsecops

# Per-instance configuration. Auth header 'Authorization: Bearer <token>'.
config_schema:
  properties:
    token:
      type: string
      description: "GitHub personal access token (with security_events / repo scopes)"
      x-soar-sensitive: true
  required:
    - token

commands:
  - id: list_secret_scanning_alerts
    name: github-list-secret-scanning-alerts
    description: "List secret-scanning alerts for a repository."
    risk: read
    inputs_schema:
      properties:
        owner: { type: string, description: "Repository owner (user or org)" }
        repo: { type: string, description: "Repository name" }
        state: { type: string, description: "Filter by state (open, resolved)" }
      required: [owner, repo]
    outputs_schema: { properties: {} }
  - id: list_code_scanning_alerts
    name: github-list-code-scanning-alerts
    description: "List code-scanning alerts for a repository."
    risk: read
    inputs_schema:
      properties:
        owner: { type: string, description: "Repository owner" }
        repo: { type: string, description: "Repository name" }
        state: { type: string, description: "Filter by state (open, dismissed, fixed)" }
      required: [owner, repo]
    outputs_schema: { properties: {} }
  - id: list_dependabot_alerts
    name: github-list-dependabot-alerts
    description: "List Dependabot (dependency) alerts for a repository."
    risk: read
    inputs_schema:
      properties:
        owner: { type: string, description: "Repository owner" }
        repo: { type: string, description: "Repository name" }
        state: { type: string, description: "Filter by state (open, dismissed, fixed)" }
      required: [owner, repo]
    outputs_schema: { properties: {} }
  - id: get_repo
    name: github-get-repo
    description: "Get a repository's metadata."
    risk: read
    inputs_schema:
      properties:
        owner: { type: string, description: "Repository owner" }
        repo: { type: string, description: "Repository name" }
      required: [owner, repo]
    outputs_schema: { properties: {} }
  - id: create_issue
    name: github-create-issue
    description: "Create an issue in a repository."
    inputs_schema:
      properties:
        owner: { type: string, description: "Repository owner" }
        repo: { type: string, description: "Repository name" }
        title: { type: string, description: "Issue title" }
        body: { type: string, description: "Issue body" }
        labels: { type: string, description: "Comma-separated labels (optional)" }
      required: [owner, repo, title]
    outputs_schema: { properties: {} }

  - id: test_connection
    name: github-test-connection
    description: "Verify the token (used by the Test button)."
    risk: read
    inputs_schema:
      properties: {}
      required: []
    outputs_schema: { properties: {} }