Security Advisory
This event occurs when there is activity relating to a global security advisory that was reviewed by GitHub. A GitHub-reviewed global security advisory provides information about security vulnerabilities or malware that have been mapped to packages in ecosystems we support. For more information about global security advisories, see "About global security advisories." For information about the API to manage security advisories, see the REST API documentation or the GraphQL documentation.
Actions
| Action | Sent when |
|---|---|
published | A security advisory was published to the GitHub community. |
updated | The metadata or description of a security advisory was changed. |
withdrawn | A previously published security advisory was withdrawn. |
Payload
Fields of the delivery for the first action above. Every action shares the event's core fields.
| Field | Type | Required | Description |
|---|---|---|---|
action | string | Yes | |
enterprise | object | No | An enterprise on GitHub. Webhook payloads contain the enterprise property when the webhook is configured |
installation | object | No | The GitHub App installation. Webhook payloads contain the installation property when the event is configured |
organization | object | No | A GitHub organization. Webhook payloads contain the organization property when the webhook is configured for an |
repository | object | No | The repository on GitHub where the event occurred. Webhook payloads contain the repository property |
security_advisory | object | Yes | The details of the security advisory, including summary, description, and severity. |
sender | object | No | A GitHub user. |