Closes: Part of#1428

Migrates thesecret_protection toolset (GetSecretScanningAlert andListSecretScanningAlerts) from mark3labs/mcp-go to modelcontextprotocol/go-sdk.

Changes

• Tool definitions: Converted DSL-style schemas to explicitjsonschema.Schema structures
• Handler signatures: Updated tomcp.ToolHandlerFor[map[string]any, any] with 3-value returns(*mcp.CallToolResult, any, error)
• Parameter extraction: Now usesargs map[string]any directly instead of extracting from request
• Result helpers: Replacedmcp.NewToolResult* withutils.NewToolResult*
• Test updates: Added toolsnaps validation and updated handler invocations
• Toolset registration: Enabledsecret_protection inDefaultToolsetGroup

Example of the schema migration:

// Before (mark3labs/mcp-go)mcp.NewTool("get_secret_scanning_alert",mcp.WithString("owner",mcp.Required()),mcp.WithString("repo",mcp.Required()),mcp.WithNumber("alertNumber",mcp.Required()),)// After (modelcontextprotocol/go-sdk)mcp.Tool{Name:"get_secret_scanning_alert",InputSchema:&jsonschema.Schema{Type:"object",Properties:map[string]*jsonschema.Schema{"owner": {Type:"string"},"repo": {Type:"string"},"alertNumber": {Type:"number"},        },Required: []string{"owner","repo","alertNumber"},    },}

Custom agent used: go-sdk-tool-migrator
Agent specializing in migrating MCP tools from mark3labs/mcp-go to modelcontextprotocol/go-sdk

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn moreCopilot coding agent tips in the docs.