Dependabot Alert
This event occurs when there is activity relating to Dependabot alerts.
Actions
| Action | Sent when |
|---|---|
assignees-changed | The assignees for a Dependabot alert were updated. |
auto-dismissed | A Dependabot alert was automatically closed by a Dependabot auto-triage rule. |
auto-reopened | A Dependabot alert, that had been automatically closed by a Dependabot auto-triage rule, was automatically reopened because the alert metadata or rule changed. |
created | A manifest file change introduced a vulnerable dependency, or a GitHub Security Advisory was published and an existing dependency was found to be vulnerable. |
dismissed | A Dependabot alert was manually closed. |
fixed | A manifest file change removed a vulnerability. |
reintroduced | A manifest file change introduced a vulnerable dependency that had previously been fixed. |
reopened | A Dependabot alert was manually reopened. |
Payload
Fields of the delivery for the first action above. Every action shares the event's core fields.
| Field | Type | Required | Description |
|---|---|---|---|
action | string | Yes | |
alert | object | Yes | A Dependabot alert. |
installation | object | No | The GitHub App installation. Webhook payloads contain the installation property when the event is configured |
organization | object | No | A GitHub organization. Webhook payloads contain the organization property when the webhook is configured for an |
enterprise | object | No | An enterprise on GitHub. Webhook payloads contain the enterprise property when the webhook is configured |
repository | object | Yes | The repository on GitHub where the event occurred. Webhook payloads contain the repository property |
sender | object | Yes | A GitHub user. |
Subscribing
To subscribe to this event, a GitHub App must have at least read-level access for the "Dependabot alerts" repository permission.