The official GitHub Copilot Advanced Security plugin
安装
npx skills add github/copilot-advanced-security-plugingh skill install github/copilot-advanced-security-plugingit clone --depth 1 https://github.com/github/copilot-advanced-security-plugin合集内的技能
- Dependency ScanningGitHub官方Scan repository dependencies for known vulnerabilities using the GitHub MCP Server's Dependabot toolset and the GitHub Advisory Database. Use when asked to check dependency security, audit lockfiles, or verify packages before merging.
- Secret ScanningGitHub官方Scan files, content, or recent changes for secrets such as API keys, passwords, tokens, and credentials using the GitHub MCP Server's run_secret_scanning tool.