> ## Documentation Index
> Fetch the complete documentation index at: https://tracecat-codex-docs-secrets-oauth-discoverability.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# GitHub MCP

> Reference for the Tracecat GitHub MCP integration: registered actions, required secrets, expected inputs, and example workflow usage.

## Cancel workflow run

Action ID: `tools.github.cancel_workflow_run`

Cancel workflow run. Calls POST /repos/\{owner}/\{repo}/actions/runs/\{run\_id}/cancel directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="run_id" type="integer" required>
  GitHub API path value for run\_id.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Compare commits

Action ID: `tools.github.compare_commits`

Compare commits. Calls GET /repos/\{owner}/\{repo}/compare/\{basehead} directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="basehead" type="string" required>
  GitHub API path value for basehead.
</ParamField>

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## Create issue

Action ID: `tools.github.create_issue`

Create issue. Calls POST /repos/\{owner}/\{repo}/issues directly. Accepted OAuth scopes: repo (default; omit only for public repository data). For bug reports, pass type: Bug where issue types are supported and labels: \[bug] as the caller-controlled fallback; labels, assignees, milestone, and issue\_field\_values are passed through unchanged.

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Create issue comment

Action ID: `tools.github.create_issue_comment`

Create issue comment. Calls POST /repos/\{owner}/\{repo}/issues/\{issue\_number}/comments directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="issue_number" type="integer" required>
  GitHub API path value for issue\_number.
</ParamField>

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Create or update repository content

Action ID: `tools.github.create_or_update_repository_content`

Create or update repository content. Calls PUT /repos/\{owner}/\{repo}/contents/\{path} directly. Accepted OAuth scopes: repo (default; omit only for public repository data); workflow when modifying .github/workflows.

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="path" type="string" required>
  Nested repository content path.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Create pull request

Action ID: `tools.github.create_pull_request`

Create pull request. Calls POST /repos/\{owner}/\{repo}/pulls directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Create pull request review

Action ID: `tools.github.create_pull_request_review`

Create pull request review. Calls POST /repos/\{owner}/\{repo}/pulls/\{pull\_number}/reviews directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="pull_number" type="integer" required>
  GitHub API path value for pull\_number.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Create pull request review comment

Action ID: `tools.github.create_pull_request_review_comment`

Create pull request review comment. Calls POST /repos/\{owner}/\{repo}/pulls/\{pull\_number}/comments directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="pull_number" type="integer" required>
  GitHub API path value for pull\_number.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Create repository security advisory

Action ID: `tools.github.create_repository_security_advisory`

Create repository security advisory. Calls POST /repos/\{owner}/\{repo}/security-advisories directly. Accepted OAuth scope: repo (default).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Create security advisory fork

Action ID: `tools.github.create_security_advisory_fork`

Create security advisory fork. Calls POST /repos/\{owner}/\{repo}/security-advisories/\{ghsa\_id}/forks directly. Accepted OAuth scope: repo (default).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="ghsa_id" type="string" required>
  GitHub API path value for ghsa\_id.
</ParamField>

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Disable private vulnerability reporting

Action ID: `tools.github.disable_private_vulnerability_reporting`

Disable private vulnerability reporting. Calls DELETE /repos/\{owner}/\{repo}/private-vulnerability-reporting directly. Accepted OAuth scope: repo (default).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Disable vulnerability alerts

Action ID: `tools.github.disable_vulnerability_alerts`

Disable vulnerability alerts. Calls DELETE /repos/\{owner}/\{repo}/vulnerability-alerts directly. Accepted OAuth scopes: security\_events plus repo for private repository access.

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Dispatch workflow

Action ID: `tools.github.dispatch_workflow`

Dispatch workflow. Calls POST /repos/\{owner}/\{repo}/actions/workflows/\{workflow\_id}/dispatches directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="workflow_id" type="string | integer" required>
  GitHub API path value for workflow\_id.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Download workflow job logs

Action ID: `tools.github.download_workflow_job_logs`

Download workflow job logs. Calls GET /repos/\{owner}/\{repo}/actions/jobs/\{job\_id}/logs directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="job_id" type="integer" required>
  GitHub API path value for job\_id.
</ParamField>

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## Enable private vulnerability reporting

Action ID: `tools.github.enable_private_vulnerability_reporting`

Enable private vulnerability reporting. Calls PUT /repos/\{owner}/\{repo}/private-vulnerability-reporting directly. Accepted OAuth scope: repo (default).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Enable vulnerability alerts

Action ID: `tools.github.enable_vulnerability_alerts`

Enable vulnerability alerts. Calls PUT /repos/\{owner}/\{repo}/vulnerability-alerts directly. Accepted OAuth scopes: security\_events plus repo for private repository access.

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Get branch protection

Action ID: `tools.github.get_branch_protection`

Get branch protection. Calls GET /repos/\{owner}/\{repo}/branches/\{branch}/protection directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="branch" type="string" required>
  GitHub API path value for branch.
</ParamField>

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## Get code scanning alert

Action ID: `tools.github.get_code_scanning_alert`

Get code scanning alert. Calls GET /repos/\{owner}/\{repo}/code-scanning/alerts/\{alert\_number} directly. Accepted OAuth scopes: security\_events plus repo for private repository access.

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="alert_number" type="integer" required>
  GitHub API path value for alert\_number.
</ParamField>

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## Get code scanning default setup

Action ID: `tools.github.get_code_scanning_default_setup`

Get code scanning default setup. Calls GET /repos/\{owner}/\{repo}/code-scanning/default-setup directly. Accepted OAuth scopes: security\_events plus repo for private repository access.

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## Get commit

Action ID: `tools.github.get_commit`

Get commit. Calls GET /repos/\{owner}/\{repo}/commits/\{ref} directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="ref" type="string" required>
  GitHub API path value for ref.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## Get dependabot alert

Action ID: `tools.github.get_dependabot_alert`

Get dependabot alert. Calls GET /repos/\{owner}/\{repo}/dependabot/alerts/\{alert\_number} directly. Accepted OAuth scopes: security\_events plus repo for private repository access.

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="alert_number" type="integer" required>
  GitHub API path value for alert\_number.
</ParamField>

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## Get global security advisory

Action ID: `tools.github.get_global_security_advisory`

Get global security advisory. Calls GET /advisories/\{ghsa\_id} directly. Accepted OAuth scope: repo (default).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="ghsa_id" type="string" required>
  GitHub API path value for ghsa\_id.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## Get issue

Action ID: `tools.github.get_issue`

Get issue. Calls GET /repos/\{owner}/\{repo}/issues/\{issue\_number} directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="issue_number" type="integer" required>
  GitHub API path value for issue\_number.
</ParamField>

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## Get organization audit log

Action ID: `tools.github.get_organization_audit_log`

Get organization audit log. Calls GET /orgs/\{org}/audit-log directly. Accepted OAuth scopes: read:audit\_log.

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="org" type="string" required>
  GitHub API path value for org.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## Get private vulnerability reporting

Action ID: `tools.github.get_private_vulnerability_reporting`

Get private vulnerability reporting. Calls GET /repos/\{owner}/\{repo}/private-vulnerability-reporting directly. Accepted OAuth scope: repo (default).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## Get pull request

Action ID: `tools.github.get_pull_request`

Get pull request. Calls GET /repos/\{owner}/\{repo}/pulls/\{pull\_number} directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="pull_number" type="integer" required>
  GitHub API path value for pull\_number.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## Get pull request merge state

Action ID: `tools.github.get_pull_request_merge_state`

Get pull request merge state. Calls GET /repos/\{owner}/\{repo}/pulls/\{pull\_number}/merge directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="pull_number" type="integer" required>
  GitHub API path value for pull\_number.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## Get repository

Action ID: `tools.github.get_repository`

Get repository. Calls GET /repos/\{owner}/\{repo} directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## Get repository collaborator permission

Action ID: `tools.github.get_repository_collaborator_permission`

Get repository collaborator permission. Calls GET /repos/\{owner}/\{repo}/collaborators/\{username}/permission directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="username" type="string" required>
  GitHub API path value for username.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## Get repository content

Action ID: `tools.github.get_repository_content`

Get repository content. Calls GET /repos/\{owner}/\{repo}/contents/\{path} directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="path" type="string" required>
  Nested repository content path.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## Get repository sbom

Action ID: `tools.github.get_repository_sbom`

Get repository sbom. Calls GET /repos/\{owner}/\{repo}/dependency-graph/sbom directly. Accepted OAuth scopes: security\_events plus repo for private repository access.

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## Get repository security advisory

Action ID: `tools.github.get_repo_security_advisory`

Get repository security advisory. Calls GET /repos/\{owner}/\{repo}/security-advisories/\{ghsa\_id} directly. Accepted OAuth scope: repo (default).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="ghsa_id" type="string" required>
  GitHub API path value for ghsa\_id.
</ParamField>

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## Get secret scanning alert

Action ID: `tools.github.get_secret_scanning_alert`

Get secret scanning alert. Calls GET /repos/\{owner}/\{repo}/secret-scanning/alerts/\{alert\_number} directly. Accepted OAuth scopes: security\_events plus repo for private repository access.

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="alert_number" type="integer" required>
  GitHub API path value for alert\_number.
</ParamField>

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## Get vulnerability alert status

Action ID: `tools.github.get_vulnerability_alert_status`

Get vulnerability alert status. Calls GET /repos/\{owner}/\{repo}/vulnerability-alerts directly. Accepted OAuth scopes: security\_events plus repo for private repository access.

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## Get workflow run

Action ID: `tools.github.get_workflow_run`

Get workflow run. Calls GET /repos/\{owner}/\{repo}/actions/runs/\{run\_id} directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="run_id" type="integer" required>
  GitHub API path value for run\_id.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## GitHub MCP

Action ID: `tools.github.mcp`

Use AI to interact with GitHub.

Reference: [https://docs.github.com/en/copilot](https://docs.github.com/en/copilot)

### Secrets

Required secrets:

* `github_mcp_oauth`: OAuth token `GITHUB_MCP_USER_TOKEN`.

Optional secrets:

* `anthropic`: optional values `ANTHROPIC_API_KEY`.
* `openai`: optional values `OPENAI_API_KEY`.
* `gemini`: optional values `GEMINI_API_KEY`.
* `mistral`: optional values `MISTRAL_API_KEY`.
* `amazon_bedrock`: optional values `AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY`, `AWS_REGION`, `AWS_ROLE_ARN`, `AWS_ROLE_SESSION_NAME`, `AWS_SESSION_TOKEN`, `AWS_BEARER_TOKEN_BEDROCK`, `AWS_MODEL_ID`, `AWS_INFERENCE_PROFILE_ID`.
* `custom-model-provider`: optional values `CUSTOM_MODEL_PROVIDER_API_KEY`, `CUSTOM_MODEL_PROVIDER_MODEL_NAME`, `CUSTOM_MODEL_PROVIDER_BASE_URL`.
* `azure_openai`: optional values `AZURE_API_BASE`, `AZURE_API_VERSION`, `AZURE_DEPLOYMENT_NAME`, `AZURE_API_KEY`, `AZURE_AD_TOKEN`, `AZURE_TENANT_ID`, `AZURE_CLIENT_ID`, `AZURE_CLIENT_SECRET`.
* `azure_ai`: optional values `AZURE_API_BASE`, `AZURE_API_KEY`, `AZURE_AD_TOKEN`, `AZURE_TENANT_ID`, `AZURE_CLIENT_ID`, `AZURE_CLIENT_SECRET`, `AZURE_API_VERSION`, `AZURE_AI_MODEL_NAME`.
* `litellm`: required values `LITELLM_BASE_URL`.

### Input fields

<ParamField path="instructions" type="string" required>
  Instructions for the agent.
</ParamField>

<ParamField path="user_prompt" type="string" required>
  User prompt to the agent.
</ParamField>

<ParamField path="model" type="ModelSelection | null">
  Model to use. Pick from the list of models enabled for this workspace. Provide this field, or both deprecated `model_name` and `model_provider`.

  Default: `null`.
</ParamField>

<ParamField path="model_name" type="string | null">
  Deprecated. Use `model` instead. If `model` is omitted, set this together with `model_provider`.

  Default: `null`.
</ParamField>

<ParamField path="model_provider" type="string | null">
  Deprecated. Use `model` instead. If `model` is omitted, set this together with `model_name`.

  Default: `null`.
</ParamField>

## List code scanning alert instances

Action ID: `tools.github.list_code_scanning_alert_instances`

List code scanning alert instances. Calls GET /repos/\{owner}/\{repo}/code-scanning/alerts/\{alert\_number}/instances directly. Accepted OAuth scopes: security\_events plus repo for private repository access.

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="alert_number" type="integer" required>
  GitHub API path value for alert\_number.
</ParamField>

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## List commits

Action ID: `tools.github.list_commits`

List commits. Calls GET /repos/\{owner}/\{repo}/commits directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## List global security advisories

Action ID: `tools.github.list_global_security_advisories`

List global security advisories. Calls GET /advisories directly. Accepted OAuth scope: repo (default).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## List issue comments

Action ID: `tools.github.list_issue_comments`

List issue comments. Calls GET /repos/\{owner}/\{repo}/issues/\{issue\_number}/comments directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="issue_number" type="integer" required>
  GitHub API path value for issue\_number.
</ParamField>

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## List organization code scanning alerts

Action ID: `tools.github.list_org_code_scanning_alerts`

List organization code scanning alerts. Calls GET /orgs/\{org}/code-scanning/alerts directly. Accepted OAuth scopes: security\_events plus repo for private repository access.

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="org" type="string" required>
  GitHub API path value for org.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## List organization dependabot alerts

Action ID: `tools.github.list_org_dependabot_alerts`

List organization dependabot alerts. Calls GET /orgs/\{org}/dependabot/alerts directly. Accepted OAuth scopes: security\_events plus repo for private repository access.

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="org" type="string" required>
  GitHub API path value for org.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## List organization secret scanning alerts

Action ID: `tools.github.list_org_secret_scanning_alerts`

List organization secret scanning alerts. Calls GET /orgs/\{org}/secret-scanning/alerts directly. Accepted OAuth scopes: security\_events plus repo for private repository access.

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="org" type="string" required>
  GitHub API path value for org.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## List organization security advisories

Action ID: `tools.github.list_organization_security_advisories`

List organization security advisories. Calls GET /orgs/\{org}/security-advisories directly. Accepted OAuth scope: repo (default).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="org" type="string" required>
  GitHub API path value for org.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## List pull request files

Action ID: `tools.github.list_pull_request_files`

List pull request files. Calls GET /repos/\{owner}/\{repo}/pulls/\{pull\_number}/files directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="pull_number" type="integer" required>
  GitHub API path value for pull\_number.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## List pull request review comments

Action ID: `tools.github.list_pull_request_review_comments`

List pull request review comments. Calls GET /repos/\{owner}/\{repo}/pulls/\{pull\_number}/comments directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="pull_number" type="integer" required>
  GitHub API path value for pull\_number.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## List pull requests

Action ID: `tools.github.list_pull_requests`

List pull requests. Calls GET /repos/\{owner}/\{repo}/pulls directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## List repository code scanning alerts

Action ID: `tools.github.list_repo_code_scanning_alerts`

List repository code scanning alerts. Calls GET /repos/\{owner}/\{repo}/code-scanning/alerts directly. Accepted OAuth scopes: security\_events plus repo for private repository access.

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## List repository dependabot alerts

Action ID: `tools.github.list_repo_dependabot_alerts`

List repository dependabot alerts. Calls GET /repos/\{owner}/\{repo}/dependabot/alerts directly. Accepted OAuth scopes: security\_events plus repo for private repository access.

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## List repository issues

Action ID: `tools.github.list_repository_issues`

List repository issues. Calls GET /repos/\{owner}/\{repo}/issues directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## List repository secret scanning alerts

Action ID: `tools.github.list_repo_secret_scanning_alerts`

List repository secret scanning alerts. Calls GET /repos/\{owner}/\{repo}/secret-scanning/alerts directly. Accepted OAuth scopes: security\_events plus repo for private repository access.

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## List repository security advisories

Action ID: `tools.github.list_repo_security_advisories`

List repository security advisories. Calls GET /repos/\{owner}/\{repo}/security-advisories directly. Accepted OAuth scope: repo (default).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## List repository workflow runs

Action ID: `tools.github.list_repository_workflow_runs`

List repository workflow runs. Calls GET /repos/\{owner}/\{repo}/actions/runs directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## List repository workflows

Action ID: `tools.github.list_repository_workflows`

List repository workflows. Calls GET /repos/\{owner}/\{repo}/actions/workflows directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## List secret scanning alert locations

Action ID: `tools.github.list_secret_scanning_alert_locations`

List secret scanning alert locations. Calls GET /repos/\{owner}/\{repo}/secret-scanning/alerts/\{alert\_number}/locations directly. Accepted OAuth scopes: security\_events plus repo for private repository access.

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="alert_number" type="integer" required>
  GitHub API path value for alert\_number.
</ParamField>

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## List workflow run jobs

Action ID: `tools.github.list_workflow_run_jobs`

List workflow run jobs. Calls GET /repos/\{owner}/\{repo}/actions/runs/\{run\_id}/jobs directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="run_id" type="integer" required>
  GitHub API path value for run\_id.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## Merge pull request

Action ID: `tools.github.merge_pull_request`

Merge pull request. Calls PUT /repos/\{owner}/\{repo}/pulls/\{pull\_number}/merge directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="pull_number" type="integer" required>
  GitHub API path value for pull\_number.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Request security advisory cve

Action ID: `tools.github.request_security_advisory_cve`

Request security advisory cve. Calls POST /repos/\{owner}/\{repo}/security-advisories/\{ghsa\_id}/cve directly. Accepted OAuth scope: repo (default).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="ghsa_id" type="string" required>
  GitHub API path value for ghsa\_id.
</ParamField>

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Rerun failed workflow jobs

Action ID: `tools.github.rerun_failed_workflow_jobs`

Rerun failed workflow jobs. Calls POST /repos/\{owner}/\{repo}/actions/runs/\{run\_id}/rerun-failed-jobs directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="run_id" type="integer" required>
  GitHub API path value for run\_id.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Search code

Action ID: `tools.github.search_code`

Search code. Calls GET /search/code directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

## Submit private vulnerability report

Action ID: `tools.github.submit_private_vulnerability_report`

Submit private vulnerability report. Calls POST /repos/\{owner}/\{repo}/security-advisories/reports directly. Accepted OAuth scope: repo (default). The payload is GitHub's native private report body and may include summary, description, severity, vulnerabilities, and CVE information; it is never converted into a public Issue.

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Update branch protection

Action ID: `tools.github.update_branch_protection`

Update branch protection. Calls PUT /repos/\{owner}/\{repo}/branches/\{branch}/protection directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="branch" type="string" required>
  GitHub API path value for branch.
</ParamField>

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Update code scanning alert

Action ID: `tools.github.update_code_scanning_alert`

Update code scanning alert. Calls PATCH /repos/\{owner}/\{repo}/code-scanning/alerts/\{alert\_number} directly. Accepted OAuth scopes: security\_events plus repo for private repository access.

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="alert_number" type="integer" required>
  GitHub API path value for alert\_number.
</ParamField>

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Update code scanning default setup

Action ID: `tools.github.update_code_scanning_default_setup`

Update code scanning default setup. Calls PATCH /repos/\{owner}/\{repo}/code-scanning/default-setup directly. Accepted OAuth scopes: security\_events plus repo for private repository access.

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Update dependabot alert

Action ID: `tools.github.update_dependabot_alert`

Update dependabot alert. Calls PATCH /repos/\{owner}/\{repo}/dependabot/alerts/\{alert\_number} directly. Accepted OAuth scopes: security\_events plus repo for private repository access.

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="alert_number" type="integer" required>
  GitHub API path value for alert\_number.
</ParamField>

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Update issue

Action ID: `tools.github.update_issue`

Update issue. Calls PATCH /repos/\{owner}/\{repo}/issues/\{issue\_number} directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="issue_number" type="integer" required>
  GitHub API path value for issue\_number.
</ParamField>

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Update pull request

Action ID: `tools.github.update_pull_request`

Update pull request. Calls PATCH /repos/\{owner}/\{repo}/pulls/\{pull\_number} directly. Accepted OAuth scopes: repo (default; omit only for public repository data).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="pull_number" type="integer" required>
  GitHub API path value for pull\_number.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Update repository security advisory

Action ID: `tools.github.update_repo_security_advisory`

Update repository security advisory. Calls PATCH /repos/\{owner}/\{repo}/security-advisories/\{ghsa\_id} directly. Accepted OAuth scope: repo (default).

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="ghsa_id" type="string" required>
  GitHub API path value for ghsa\_id.
</ParamField>

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>

## Update secret scanning alert

Action ID: `tools.github.update_secret_scanning_alert`

Update secret scanning alert. Calls PATCH /repos/\{owner}/\{repo}/secret-scanning/alerts/\{alert\_number} directly. Accepted OAuth scopes: security\_events plus repo for private repository access.

Reference: [https://docs.github.com/en/rest](https://docs.github.com/en/rest)

### Secrets

Required secrets:

* `github_oauth`: OAuth token `GITHUB_USER_TOKEN`.

### Input fields

<ParamField path="alert_number" type="integer" required>
  GitHub API path value for alert\_number.
</ParamField>

<ParamField path="owner" type="string" required>
  GitHub API path value for owner.
</ParamField>

<ParamField path="repo" type="string" required>
  GitHub API path value for repo.
</ParamField>

<ParamField path="base_url" type="string">
  GitHub.com REST API base URL.

  Default: `"https://api.github.com"`.
</ParamField>

<ParamField path="params" type="object | null">
  API-native query parameters, including pagination and filters.

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  API-native request body passed through without validation.

  Default: `null`.
</ParamField>