### Preflight Checklist - [x] I have searched [existing requests](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20label%3Aenhancement) and this feature hasn't been requested yet - [x] This is a single feature request (not multiple features) ### Problem Statement The official Claude GitHub App currently requests only Contents, Issues, and Pull requests (read & write). It doesn't request Dependabot alerts (vulnerability_alerts: read), so any automation running under the App's in

[FEATURE] Add Dependabot alerts (vulnerability_alerts) read permission to the Claude GitHub App

Status Open

Maintainer reply None cached

Activity 0 comments · opened Jul 21, 2026

Preflight Checklist

[x] I have searched existing requests and this feature hasn't been requested yet
[x] This is a single feature request (not multiple features)

Problem Statement

The official Claude GitHub App currently requests only Contents, Issues, and Pull requests (read & write). It doesn't request Dependabot alerts (vulnerability_alerts: read), so any automation running under the App's installation token gets a 403 (Resource not accessible by integration) on GET /repos/{owner}/{repo}/dependabot/alerts. This problem is exacerbated in Claude Tag as all Github requests must go through the Claude GitHub App, so even trying to use a PAT to go around the app fails to make requests to Github dependabot alerts.

Proposed Solution

Add the Dependabot alerts permission (read-only) to the Claude GitHub App's manifest

Alternative Solutions

_No response_

Priority

High - Significant impact on productivity

Feature Category

Other

Use Case Example

We want to run Claude automation (specifically using the Claude Tag Slack routines) that triages open Dependabot alerts and opens PRs to fix them.

Additional Context