Skip to content
Tentacular Tentacular

GitHub Security Digest

FieldValue
Namegithub-security-digest
Categoryreporting
Complexitymoderate
Tagsgithub-security, dependabot, llm-triage, cron-triggered, postgres-state
Authorrandybias
Min Version0.1.0

Description

Section titled “Description”

Daily digest of Dependabot and code scanning alerts across GitHub repos with LLM-powered prioritization. Fetches security alerts from the GitHub API, deduplicates against previously seen alerts in Postgres, uses Claude to prioritize and summarize findings, and delivers a digest to Slack.

DAG Structure

Section titled “DAG Structure”
fetch-alerts → deduplicate-store → prioritize-summarize → notify-slack
NodePurpose
fetch-alertsFetch Dependabot and code scanning alerts from GitHub
deduplicate-storeDeduplicate against previously seen alerts in Postgres
prioritize-summarizeAI-powered prioritization and summary of new alerts
notify-slackDeliver prioritized digest to Slack

Triggers

Section titled “Triggers”
  • manual
  • cron — daily at 7:00 AM (0 7 * * *)

Dependencies

Section titled “Dependencies”
ServiceTypeRequired
GitHub APIExternalYes
Anthropic APIExternalYes
Slack webhookExternalYes
tentacular-postgresExoskeletonYes

Config

Section titled “Config”
KeyDefaultDescription
timeout120sPer-node timeout
retries1Retry count per node
github_orgmy-orgGitHub organization to scan
repos[]Specific repos to scan (empty = all in org)

Secrets

Section titled “Secrets”
  • github.token — GitHub personal access token with security alert permissions
  • anthropic.api_key — Claude API key for prioritization
  • slack.webhook_url — Slack webhook for digest delivery

Usage

Section titled “Usage”
Terminal window
tntc scaffold init github-security-digest
tntc scaffold init github-security-digest my-custom-name
tntc scaffold info github-security-digest

Source

Section titled “Source”

Scaffold source: quickstarts/github-security-digest/