[mcp-tools] Add check_dependency_vulnerabilities to security_advisories toolset

[Copilot]

Bug Fix

The MCP tools audit found a drift: check_dependency_vulnerabilities is exposed by the remote GitHub MCP server but was missing from security_advisories in our toolset-permissions mapping. This change restores mapping/docs parity for advisory-database tools under the existing security-events scope.

• What was the bug?

  security_advisories did not include check_dependency_vulnerabilities, so our local toolset metadata lagged behind the remotely available MCP tool surface.

• How did you fix it?

  • Toolset mapping update
    • Added check_dependency_vulnerabilities to:
      • pkg/workflow/data/github_toolsets_permissions.json
    • Kept tool ordering alphabetical.
  • Docs alignment
    • Updated .github/aw/github-mcp-server.md:
      • Added the tool to the security_advisories table
      • Bumped Last Updated date

"security_advisories": {
  "read_permissions": ["security-events"],
  "write_permissions": ["security-events"],
  "tools": [
    "check_dependency_vulnerabilities",
    "get_global_security_advisory",
    "list_global_security_advisories",
    "list_repository_security_advisories"
  ]
}

• Testing

  Validation focus remained on the issue scope: preserving security_advisories toolset behavior and compile compatibility while adding the missing tool entry.

[Copilot]

Pull request overview

Restores parity between the locally maintained GitHub MCP toolset-permissions mapping and the remote MCP server surface by adding the missing check_dependency_vulnerabilities tool to the security_advisories toolset, and aligning the internal documentation accordingly.

Changes:

• Added check_dependency_vulnerabilities to the security_advisories toolset in github_toolsets_permissions.json.
• Updated .github/aw/github-mcp-server.md to document the newly mapped tool and refreshed the “Last Updated” date.

Show a summary per file

File	Description
pkg/workflow/data/github_toolsets_permissions.json	Adds check_dependency_vulnerabilities to the security_advisories toolset permissions mapping.
.github/aw/github-mcp-server.md	Documents check_dependency_vulnerabilities under security_advisories and updates the last-updated timestamp.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 2/2 changed files
• Comments generated: 1