antarcticaam/Dependabot PR triage
Composite action that automates dependabot PR triage: labels, reviewers, Codex review comment, security alerts, GitHub Projects tracking, and Linear issue creation.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jun 12, 2026
- License
- None
Pinned Snippet
uses: antarcticaam/dependabot-triage-action@f08bdf6f036a23f27406fd21b9e39fed5b2b7a5a # v1.0.1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| github-token | GITHUB_TOKEN for PR comments, labels, and reviewer assignment | yes | — |
| gh-project-token | PAT with 'project' scope for org-level GitHub Projects writes. Falls back to github-token if omitted, but GITHUB_TOKEN usually lacks project scope. | no | "" |
| linear-api-key | Linear personal API key. The Linear issue creation step is skipped automatically when this is absent. | no | "" |
| pr-number | PR number to triage. Callers should resolve `github.event.pull_request.number || inputs.pr_number` before passing. | yes | — |
| dry-run | When 'true', log what would happen without mutating labels, comments, projects, or Linear. | no | false |
| force | When 'true', bypass the idempotency marker check and re-run all steps even if triage was already applied. | no | false |
| github-project-number | Org-level GitHub project number to add the PR to. Set to the integer project number (e.g. '51'). Step is skipped when empty. | no | "" |
| primary-reviewer | GitHub username assigned as reviewer on every dependabot PR | no | LiamDeaconAntarcticaAM |
| security-reviewer | GitHub username added as a silent second reviewer on security PRs only. Not @-mentioned in comments to avoid spam on recreate flows. | no | edwardconnect |
| security-alert-mention | GitHub username @-mentioned in the security alert comment body | no | LiamDeaconAntarcticaAM |
| linear-team-id | Linear team UUID for issue creation | no | a7cd5cb3-15cf-43c3-ae1e-f51f435ec982 |
| linear-project-id | Linear project UUID for security issue creation | no | a7813bb0-501c-4720-bd63-2f7e885a656c |
| linear-inreview-state-id | Linear "In Review" state UUID (applied to security PRs) | no | 72d48148-a34f-4bb9-ad57-c40f02609dde |
| linear-todo-state-id | Linear "Todo" state UUID (applied to routine PRs) | no | d8bcab6a-fa23-4d75-8a16-04a385380f51 |
| linear-assignee-id | Linear assignee UUID for created issues | no | ab6d344a-e6ba-4ee1-8a37-8138872b3c58 |
Outputs
no outputs