Function dependabotErrMsg

pkg/github/dependabot.go:219–227

dependabotErrMsg enhances error messages for dependabot API failures by appending a hint about token permissions when the response indicates the token may lack access to the repository (403 or 404).

(base, owner, repo string, resp *github.Response)

// appending a hint about token permissions when the response indicates
// the token may lack access to the repository (403 or 404).
func dependabotErrMsg(base, owner, repo string, resp *github.Response) string {
	if resp != nil && (resp.StatusCode == http.StatusForbidden || resp.StatusCode == http.StatusNotFound) {
		return fmt.Sprintf("%s. Your token may not have access to Dependabot alerts on %s/%s. "+
			"To access Dependabot alerts, the token needs the 'security_events' scope or, for fine-grained tokens, "+
			"Dependabot alerts read permission for this specific repository.",
			base, owner, repo)
	}
	return base
}