Migrate secret_scanning toolset to modelcontextprotocol/go-sdk

[Copilot]

Closes: Part of #1428

Migrates the secret_protection toolset (GetSecretScanningAlert and ListSecretScanningAlerts) from mark3labs/mcp-go to modelcontextprotocol/go-sdk.

Changes

• Tool definitions: Converted DSL-style schemas to explicit jsonschema.Schema structures
• Handler signatures: Updated to mcp.ToolHandlerFor[map[string]any, any] with 3-value returns (*mcp.CallToolResult, any, error)
• Parameter extraction: Now uses args map[string]any directly instead of extracting from request
• Result helpers: Replaced mcp.NewToolResult* with utils.NewToolResult*
• Test updates: Added toolsnaps validation and updated handler invocations
• Toolset registration: Enabled secret_protection in DefaultToolsetGroup

Example of the schema migration:

// Before (mark3labs/mcp-go)
mcp.NewTool(
    "get_secret_scanning_alert",
    mcp.WithString("owner", mcp.Required()),
    mcp.WithString("repo", mcp.Required()),
    mcp.WithNumber("alertNumber", mcp.Required()),
)

// After (modelcontextprotocol/go-sdk)
mcp.Tool{
    Name: "get_secret_scanning_alert",
    InputSchema: &jsonschema.Schema{
        Type: "object",
        Properties: map[string]*jsonschema.Schema{
            "owner": {Type: "string"},
            "repo": {Type: "string"},
            "alertNumber": {Type: "number"},
        },
        Required: []string{"owner", "repo", "alertNumber"},
    },
}

Original prompt

Migrate the secret_protection toolset to modelcontextprotocol/go-sdk.

This will be merged into the parent PR #1428, so reference that PR in the description to track the migration

Custom agent used: go-sdk-tool-migrator
Agent specializing in migrating MCP tools from mark3labs/mcp-go to modelcontextprotocol/go-sdk

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[LuluBeatson]

[Copilot]

Pull Request Overview

This PR migrates the secret_protection toolset from mark3labs/mcp-go to modelcontextprotocol/go-sdk as part of a larger migration effort. It updates the implementation of GetSecretScanningAlert and ListSecretScanningAlerts tools to use the new SDK's API patterns and enables the toolset in the default toolset group.

Key changes:

• Converted DSL-style tool schemas to explicit jsonschema.Schema structures
• Updated handler signatures to return 3 values: (*mcp.CallToolResult, any, error)
• Migrated parameter extraction from mcp.CallToolRequest to map[string]any args
• Replaced mcp.NewToolResult* helpers with utils.NewToolResult*

Reviewed Changes

Copilot reviewed 10 out of 10 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
pkg/github/secret_scanning.go	Migrated tool definitions and handlers from mark3labs/mcp-go to modelcontextprotocol/go-sdk API
pkg/github/secret_scanning_test.go	Updated tests to invoke handlers with new 3-value signature and added toolsnaps validation
pkg/github/tools.go	Uncommented secretProtection toolset registration to enable it in the default toolset group
pkg/github/__toolsnaps__/get_secret_scanning_alert.snap	Added JSON schema snapshot for get_secret_scanning_alert tool
pkg/github/__toolsnaps__/list_secret_scanning_alerts.snap	Added JSON schema snapshot for list_secret_scanning_alerts tool