Security Advisories

Manage security advisories.

Operations

Method	Endpoint	Description
`GET`	`/advisories`	List global security advisories
`GET`	`/advisories/{ghsa_id}`	Get a global security advisory
`GET`	`/orgs/{org}/security-advisories`	List repository security advisories for an organization
`GET`	`/repos/{owner}/{repo}/security-advisories`	List repository security advisories
`POST`	`/repos/{owner}/{repo}/security-advisories`	Create a repository security advisory
`POST`	`/repos/{owner}/{repo}/security-advisories/reports`	Privately report a security vulnerability
`GET`	`/repos/{owner}/{repo}/security-advisories/{ghsa_id}`	Get a repository security advisory
`PATCH`	`/repos/{owner}/{repo}/security-advisories/{ghsa_id}`	Update a repository security advisory
`POST`	`/repos/{owner}/{repo}/security-advisories/{ghsa_id}/cve`	Request a CVE for a repository security advisory
`POST`	`/repos/{owner}/{repo}/security-advisories/{ghsa_id}/forks`	Create a temporary private fork

Example

List global security advisories, with the TypeScript SDK:

import { GitHubV3REST } from "github";

const client = new GitHubV3REST({
  baseUrl: "https://api.github.com",
});

const result = await client.securityAdvisories.listGlobalAdvisories();
console.log(result);

Nine more languages

The same call exists in every SDK. See SDKs for the other nine.