figure out how to get vulnerability alerts (dependabot) from github graphQL API (https://docs.github.com/en/graphql/reference/objects#repositoryvulnerabilityalert)

[mimoo]

I don't think it's possible actually... They have this permission when you install an app, but I couldn't find the API.

Another way to obtain dep info could be to simply run dependabot ourselves (it's ruby though)

[nasifimtiazohi]

It's available through GraphQL API, here's a script for that, however Dependabot only used to send alerts on direct dependency when I checked last time - here's an issue in their repository on that.