Security Triage Agent Sample

What’s included

• Security Triage Agent SampleAgentTemplate

  Triages dependency vulnerabilities, infrastructure log anomalies, and security-relevant pull requests. It fixes small obvious issues with PRs and files durable GitHub issues when findings need human attention.

• Query OSV.devAgentToolTemplate

  Query OSV.dev for known vulnerabilities by package name, version, and ecosystem

• Query GitHub Advisory DBAgentToolTemplate

  Query GitHub Advisory Database for vulnerabilities affecting a package

• Scan DependenciesAgentToolTemplate

  Parse a project's lockfile and check every dependency against OSV

• Get Repo FileAgentToolTemplate

  Read a file from a GitHub repository

• Create BranchAgentToolTemplate

  Create a new branch in a GitHub repository from a base ref

• Commit FileAgentToolTemplate

  Create or update a file on a branch via the GitHub API

• Create Pull RequestAgentToolTemplate

  Open a pull request from a branch

• Create GitHub IssueAgentToolTemplate

  File a GitHub issue for a security finding that needs human attention

• Query Cloud LoggingAgentToolTemplate

  Query Google Cloud Logging for security-related events

• Daily Dependency ScanAgentRoutineTemplate

  Scan all monitored repos for vulnerable dependencies and triage

• Hourly Log AnalysisAgentRoutineTemplate

  Scan GCP logs for security anomalies

• PR Security ReviewAgentRoutineTemplate

  Triggered by GitHub PR webhooks; flag security concerns on opened/updated PRs