Work through a repo's inbox — open PRs, Dependabot, code-scanning, and secret-scanning alerts — breadth-first: sweep every source, give every item one verdict (merge, fix, dismiss, ask), then act only on approved verdicts. Use when the user wants open PRs and security findings reviewed, investigated, or resolved. Triggers on: triage, review open PRs, security issues, security findings, github findings, dependabot, codeql, code scanning, secret scanning, vulnerability alerts, what needs attention, check the alerts, review the findings.
