FilesExpand file tree

main

/

secret_scanning.go

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

154 lines (141 loc) · 5.15 KB

main

/

secret_scanning.go

Copy path

Top

File metadata and controls

• Code
• Blame

154 lines (141 loc) · 5.15 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

package github

import (

"context"

"encoding/json"

"fmt"

"io"

"net/http"

"github.com/github/github-mcp-server/pkg/translations"

"github.com/google/go-github/v69/github"

"github.com/mark3labs/mcp-go/mcp"

"github.com/mark3labs/mcp-go/server"

)

func GetSecretScanningAlert(getClient GetClientFn, t translations.TranslationHelperFunc) (tool mcp.Tool, handler server.ToolHandlerFunc) {

return mcp.NewTool(

"get_secret_scanning_alert",

mcp.WithDescription(t("TOOL_GET_SECRET_SCANNING_ALERT_DESCRIPTION", "Get details of a specific secret scanning alert in a GitHub repository.")),

mcp.WithToolAnnotation(mcp.ToolAnnotation{

Title: t("TOOL_GET_SECRET_SCANNING_ALERT_USER_TITLE", "Get secret scanning alert"),

ReadOnlyHint: true,

}),

mcp.WithString("owner",

mcp.Required(),

mcp.Description("The owner of the repository."),

),

mcp.WithString("repo",

mcp.Required(),

mcp.Description("The name of the repository."),

),

mcp.WithNumber("alertNumber",

mcp.Required(),

mcp.Description("The number of the alert."),

),

),

func(ctx context.Context, request mcp.CallToolRequest) (*mcp.CallToolResult, error) {

owner, err := requiredParam[string](request, "owner")

if err != nil {

return mcp.NewToolResultError(err.Error()), nil

}

repo, err := requiredParam[string](request, "repo")

if err != nil {

return mcp.NewToolResultError(err.Error()), nil

}

alertNumber, err := RequiredInt(request, "alertNumber")

if err != nil {

return mcp.NewToolResultError(err.Error()), nil

}

client, err := getClient(ctx)

if err != nil {

return nil, fmt.Errorf("failed to get GitHub client: %w", err)

}

alert, resp, err := client.SecretScanning.GetAlert(ctx, owner, repo, int64(alertNumber))

if err != nil {

return nil, fmt.Errorf("failed to get alert: %w", err)

}

defer func() { _ = resp.Body.Close() }()

if resp.StatusCode != http.StatusOK {

body, err := io.ReadAll(resp.Body)

if err != nil {

return nil, fmt.Errorf("failed to read response body: %w", err)

}

return mcp.NewToolResultError(fmt.Sprintf("failed to get alert: %s", string(body))), nil

}

r, err := json.Marshal(alert)

if err != nil {

return nil, fmt.Errorf("failed to marshal alert: %w", err)

}

return mcp.NewToolResultText(string(r)), nil

}

}

func ListSecretScanningAlerts(getClient GetClientFn, t translations.TranslationHelperFunc) (tool mcp.Tool, handler server.ToolHandlerFunc) {

return mcp.NewTool(

"list_secret_scanning_alerts",

mcp.WithDescription(t("TOOL_LIST_SECRET_SCANNING_ALERTS_DESCRIPTION", "List secret scanning alerts in a GitHub repository.")),

mcp.WithToolAnnotation(mcp.ToolAnnotation{

Title: t("TOOL_LIST_SECRET_SCANNING_ALERTS_USER_TITLE", "List secret scanning alerts"),

ReadOnlyHint: true,

}),

mcp.WithString("owner",

mcp.Required(),

mcp.Description("The owner of the repository."),

),

mcp.WithString("repo",

mcp.Required(),

mcp.Description("The name of the repository."),

),

mcp.WithString("state",

mcp.Description("Filter by state"),

mcp.Enum("open", "resolved"),

),

mcp.WithString("secret_type",

mcp.Description("A comma-separated list of secret types to return. All default secret patterns are returned. To return generic patterns, pass the token name(s) in the parameter."),

),

mcp.WithString("resolution",

mcp.Description("Filter by resolution"),

mcp.Enum("false_positive", "wont_fix", "revoked", "pattern_edited", "pattern_deleted", "used_in_tests"),

),

),

func(ctx context.Context, request mcp.CallToolRequest) (*mcp.CallToolResult, error) {

owner, err := requiredParam[string](request, "owner")

if err != nil {

return mcp.NewToolResultError(err.Error()), nil

}

repo, err := requiredParam[string](request, "repo")

if err != nil {

return mcp.NewToolResultError(err.Error()), nil

}

state, err := OptionalParam[string](request, "state")

if err != nil {

return mcp.NewToolResultError(err.Error()), nil

}

secretType, err := OptionalParam[string](request, "secret_type")

if err != nil {

return mcp.NewToolResultError(err.Error()), nil

}

resolution, err := OptionalParam[string](request, "resolution")

if err != nil {

return mcp.NewToolResultError(err.Error()), nil

}

client, err := getClient(ctx)

if err != nil {

return nil, fmt.Errorf("failed to get GitHub client: %w", err)

}

alerts, resp, err := client.SecretScanning.ListAlertsForRepo(ctx, owner, repo, &github.SecretScanningAlertListOptions{State: state, SecretType: secretType, Resolution: resolution})

if err != nil {

return nil, fmt.Errorf("failed to list alerts: %w", err)

}

defer func() { _ = resp.Body.Close() }()

if resp.StatusCode != http.StatusOK {

body, err := io.ReadAll(resp.Body)

if err != nil {

return nil, fmt.Errorf("failed to read response body: %w", err)

}

return mcp.NewToolResultError(fmt.Sprintf("failed to list alerts: %s", string(body))), nil

}

r, err := json.Marshal(alerts)

if err != nil {

return nil, fmt.Errorf("failed to marshal alerts: %w", err)

}

return mcp.NewToolResultText(string(r)), nil

}

}