Security Alert Routing for GitHub

Dependabot alerts, CodeQL findings, and secret scanning hits are read by the agent, prioritized by severity and reachability, and routed to the right person on WhatsApp.

Webhook + WhatsApp DMsecuritydependabotcodeql

Conversation example

Webhook received: repository_vulnerability_alert — moderate severity in `axios@0.21.1`
http_request → GitHub Code Search

New Dependabot alert. Checking if the vulnerable path is actually reachable in our code...

Dependabot alert triaged: Package: axios 0.21.1 (in packages/http-client) CVE: CVE-2024-39338 (SSRF) Reachable: YES — used in src/http-client/proxy.ts line 84 Severity upgraded: moderate → high Fix: bump to axios >= 1.7.4 Suggested assignee: @sam (owns http-client) Pinged Sam on WhatsApp with the full context. Dependabot PR auto-approved — awaiting CI.

More GitHub use cases

Deploy this in minutes

Create a LunoGen agent, connect GitHub, and start running this workflow from WhatsApp today.

Back to GitHub