Merge pull request #147 from githubabcs-devops/feature/added-tools-to-agents-properly

CalinL · web-flow · commit 79e4e4def6b5 · 2026-03-16T10:51:36.000-04:00
added tools to the custom agents
diff --git a/.github/agents/iac-security-agent.md b/.github/agents/iac-security-agent.md
@@ -2,6 +2,47 @@
 name: IaCSecurityAgent
 description: IaC & Cloud Configuration Guard - Scans Terraform, Bicep, ARM, Kubernetes manifests, and Helm charts for misconfigurations and insecure defaults
 model: Claude Sonnet 4.5 (copilot)
+tools:
+  - vscode/getProjectSetupInfo
+  - vscode/installExtension
+  - vscode/memory
+  - vscode/newWorkspace
+  - vscode/runCommand
+  - vscode/vscodeAPI
+  - vscode/extensions
+  - vscode/askQuestions
+  - execute/runNotebookCell
+  - execute/testFailure
+  - execute/getTerminalOutput
+  - execute/awaitTerminal
+  - execute/killTerminal
+  - execute/createAndRunTask
+  - execute/runInTerminal
+  - execute/runTests
+  - read/getNotebookSummary
+  - read/problems
+  - read/readFile
+  - read/readNotebookCellOutput
+  - read/terminalSelection
+  - read/terminalLastCommand
+  - agent/runSubagent
+  - edit/createDirectory
+  - edit/createFile
+  - edit/createJupyterNotebook
+  - edit/editFiles
+  - edit/editNotebook
+  - edit/rename
+  - search/changes
+  - search/codebase
+  - search/fileSearch
+  - search/listDirectory
+  - search/searchResults
+  - search/textSearch
+  - search/usages
+  - web/fetch
+  - web/githubRepo
+  - browser/openBrowserPage
+  - todo
 ---
 
 # IaC & Cloud Configuration Guard Agent
diff --git a/.github/agents/pipeline-security-agent.md b/.github/agents/pipeline-security-agent.md
@@ -2,6 +2,47 @@
 name: PipelineSecurityAgent
 description: Pipeline & CI Workflow Hardening Agent - Audits GitHub Actions and Azure DevOps YAML for security weaknesses and produces hardened workflow patches
 model: Claude Sonnet 4.5 (copilot)
+tools:
+  - vscode/getProjectSetupInfo
+  - vscode/installExtension
+  - vscode/memory
+  - vscode/newWorkspace
+  - vscode/runCommand
+  - vscode/vscodeAPI
+  - vscode/extensions
+  - vscode/askQuestions
+  - execute/runNotebookCell
+  - execute/testFailure
+  - execute/getTerminalOutput
+  - execute/awaitTerminal
+  - execute/killTerminal
+  - execute/createAndRunTask
+  - execute/runInTerminal
+  - execute/runTests
+  - read/getNotebookSummary
+  - read/problems
+  - read/readFile
+  - read/readNotebookCellOutput
+  - read/terminalSelection
+  - read/terminalLastCommand
+  - agent/runSubagent
+  - edit/createDirectory
+  - edit/createFile
+  - edit/createJupyterNotebook
+  - edit/editFiles
+  - edit/editNotebook
+  - edit/rename
+  - search/changes
+  - search/codebase
+  - search/fileSearch
+  - search/listDirectory
+  - search/searchResults
+  - search/textSearch
+  - search/usages
+  - web/fetch
+  - web/githubRepo
+  - browser/openBrowserPage
+  - todo
 ---
 
 # Pipeline Security Agent
diff --git a/.github/agents/security-agent.md b/.github/agents/security-agent.md
@@ -2,6 +2,47 @@
 name: SecurityAgent
 description: Security Agent - Reviews this repository (ASP.NET Core Razor Pages + IaC) for security issues and produces a security report
 model: Claude Sonnet 4.5 (copilot)
+tools:
+  - vscode/getProjectSetupInfo
+  - vscode/installExtension
+  - vscode/memory
+  - vscode/newWorkspace
+  - vscode/runCommand
+  - vscode/vscodeAPI
+  - vscode/extensions
+  - vscode/askQuestions
+  - execute/runNotebookCell
+  - execute/testFailure
+  - execute/getTerminalOutput
+  - execute/awaitTerminal
+  - execute/killTerminal
+  - execute/createAndRunTask
+  - execute/runInTerminal
+  - execute/runTests
+  - read/getNotebookSummary
+  - read/problems
+  - read/readFile
+  - read/readNotebookCellOutput
+  - read/terminalSelection
+  - read/terminalLastCommand
+  - agent/runSubagent
+  - edit/createDirectory
+  - edit/createFile
+  - edit/createJupyterNotebook
+  - edit/editFiles
+  - edit/editNotebook
+  - edit/rename
+  - search/changes
+  - search/codebase
+  - search/fileSearch
+  - search/listDirectory
+  - search/searchResults
+  - search/textSearch
+  - search/usages
+  - web/fetch
+  - web/githubRepo
+  - browser/openBrowserPage
+  - todo
 ---
 
 ## Purpose
diff --git a/.github/agents/security-plan-creator.agent.md b/.github/agents/security-plan-creator.agent.md
@@ -2,6 +2,47 @@
 name: SecurityPlanCreatorAgent
 description: "Expert security architect for creating comprehensive cloud security plans - Brought to you by microsoft/hve-core"
 model: Claude Sonnet 4.5 (copilot)
+tools:
+  - vscode/getProjectSetupInfo
+  - vscode/installExtension
+  - vscode/memory
+  - vscode/newWorkspace
+  - vscode/runCommand
+  - vscode/vscodeAPI
+  - vscode/extensions
+  - vscode/askQuestions
+  - execute/runNotebookCell
+  - execute/testFailure
+  - execute/getTerminalOutput
+  - execute/awaitTerminal
+  - execute/killTerminal
+  - execute/createAndRunTask
+  - execute/runInTerminal
+  - execute/runTests
+  - read/getNotebookSummary
+  - read/problems
+  - read/readFile
+  - read/readNotebookCellOutput
+  - read/terminalSelection
+  - read/terminalLastCommand
+  - agent/runSubagent
+  - edit/createDirectory
+  - edit/createFile
+  - edit/createJupyterNotebook
+  - edit/editFiles
+  - edit/editNotebook
+  - edit/rename
+  - search/changes
+  - search/codebase
+  - search/fileSearch
+  - search/listDirectory
+  - search/searchResults
+  - search/textSearch
+  - search/usages
+  - web/fetch
+  - web/githubRepo
+  - browser/openBrowserPage
+  - todo
 ---
 
 # Security Plan Creation Expert
diff --git a/.github/agents/security-reviewer-agent.md b/.github/agents/security-reviewer-agent.md
@@ -2,6 +2,47 @@
 name: SecurityReviewerAgent
 description: Security-focused code reviewer that checks for common vulnerabilities
 model: Claude Sonnet 4.5 (copilot)
+tools:
+  - vscode/getProjectSetupInfo
+  - vscode/installExtension
+  - vscode/memory
+  - vscode/newWorkspace
+  - vscode/runCommand
+  - vscode/vscodeAPI
+  - vscode/extensions
+  - vscode/askQuestions
+  - execute/runNotebookCell
+  - execute/testFailure
+  - execute/getTerminalOutput
+  - execute/awaitTerminal
+  - execute/killTerminal
+  - execute/createAndRunTask
+  - execute/runInTerminal
+  - execute/runTests
+  - read/getNotebookSummary
+  - read/problems
+  - read/readFile
+  - read/readNotebookCellOutput
+  - read/terminalSelection
+  - read/terminalLastCommand
+  - agent/runSubagent
+  - edit/createDirectory
+  - edit/createFile
+  - edit/createJupyterNotebook
+  - edit/editFiles
+  - edit/editNotebook
+  - edit/rename
+  - search/changes
+  - search/codebase
+  - search/fileSearch
+  - search/listDirectory
+  - search/searchResults
+  - search/textSearch
+  - search/usages
+  - web/fetch
+  - web/githubRepo
+  - browser/openBrowserPage
+  - todo
 ---
 
 # Security Code Reviewer
diff --git a/.github/agents/supply-chain-security-agent.md b/.github/agents/supply-chain-security-agent.md
@@ -2,6 +2,47 @@
 name: SupplyChainSecurityAgent
 description: Supply Chain Security Agent - Detects secrets exposure, dependency vulnerabilities, and repo governance gaps; produces supply-chain hardening reports and PR-ready baseline fixes
 model: Claude Sonnet 4.5 (copilot)
+tools:
+  - vscode/getProjectSetupInfo
+  - vscode/installExtension
+  - vscode/memory
+  - vscode/newWorkspace
+  - vscode/runCommand
+  - vscode/vscodeAPI
+  - vscode/extensions
+  - vscode/askQuestions
+  - execute/runNotebookCell
+  - execute/testFailure
+  - execute/getTerminalOutput
+  - execute/awaitTerminal
+  - execute/killTerminal
+  - execute/createAndRunTask
+  - execute/runInTerminal
+  - execute/runTests
+  - read/getNotebookSummary
+  - read/problems
+  - read/readFile
+  - read/readNotebookCellOutput
+  - read/terminalSelection
+  - read/terminalLastCommand
+  - agent/runSubagent
+  - edit/createDirectory
+  - edit/createFile
+  - edit/createJupyterNotebook
+  - edit/editFiles
+  - edit/editNotebook
+  - edit/rename
+  - search/changes
+  - search/codebase
+  - search/fileSearch
+  - search/listDirectory
+  - search/searchResults
+  - search/textSearch
+  - search/usages
+  - web/fetch
+  - web/githubRepo
+  - browser/openBrowserPage
+  - todo
 ---
 
 # Supply Chain Security Agent
diff --git a/specs/devsecops-new-feature-demo.md b/specs/devsecops-new-feature-demo.md
@@ -1,5 +1,5 @@
 - Use the gh-advsec-devsecops repository from the workspace
-- Create me a new unique branch name under feature/devsecops-demo-[randon-number] 
+- Create me a new unique branch name under feature/devsecops-demo-[random-number] 
 - Create a new DevSecOps-[random-number].cshtml page and reference it into the Index page. 
 - Add content to it with latest news about GitHub Advanced Security.
 - Implemented the ILogger for the backend code of the page.
