Closes: Part of#1428

Migrates thesecurity_advisories toolset frommark3labs/mcp-go tomodelcontextprotocol/go-sdk.

Changes

Migrated 4 tools:

• list_global_security_advisories - List advisories with filtering by GHSA ID, CVE ID, ecosystem, severity, CWEs
• get_global_security_advisory - Get specific advisory by GHSA ID
• list_repository_security_advisories - List advisories for a repository
• list_org_repository_security_advisories - List advisories across an organization

Implementation updates:

• Function signatures:(mcp.Tool, server.ToolHandlerFunc) →(mcp.Tool, mcp.ToolHandlerFor[map[string]any, any])
• Handler signatures:func(ctx, request) (*result, error) →func(ctx, *request, args) (*result, any, error)
• Schema definitions: DSL-based → explicitjsonschema.Schema structs with properjson.RawMessage for defaults
• Parameter extraction: Fromrequest object → directargs map access
• Result helpers:mcp.NewToolResult* →utils.NewToolResult*

Testing:

• Updated handler invocation pattern to 3-param/3-return
• Addedtoolsnaps.Test() calls for schema validation
• Created 4 snapshot files

Example schema migration:

// Before (DSL)mcp.WithString("type",mcp.Description("Advisory type."),mcp.Enum("reviewed","malware","unreviewed"),mcp.DefaultString("reviewed"),)// After (JSON Schema)"type": {    Type:"string",Description:"Advisory type.",Enum:        []any{"reviewed","malware","unreviewed"},Default:json.RawMessage(`"reviewed"`),}

Custom agent used: go-sdk-tool-migrator
Agent specializing in migrating MCP tools from mark3labs/mcp-go to modelcontextprotocol/go-sdk

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn moreCopilot coding agent tips in the docs.