Skip to main content

alerts

Overview

Namealerts
TypeResource
Idgithub.dependabot.alerts

Fields

NameDatatypeDescription
auto_dismissed_atstringThe time that the alert was auto-dismissed in ISO 8601 format: YYYY-MM-DDTHH:MM:SSZ.
created_atstringThe time that the alert was created in ISO 8601 format: YYYY-MM-DDTHH:MM:SSZ.
dependencyobjectDetails for the vulnerable dependency.
dismissed_atstringThe time that the alert was dismissed in ISO 8601 format: YYYY-MM-DDTHH:MM:SSZ.
dismissed_byobjectA GitHub user.
dismissed_commentstringAn optional comment associated with the alert's dismissal.
dismissed_reasonstringThe reason that the alert was dismissed.
fixed_atstringThe time that the alert was no longer detected and was considered fixed in ISO 8601 format: YYYY-MM-DDTHH:MM:SSZ.
html_urlstringThe GitHub URL of the alert resource.
numberintegerThe security alert number.
security_advisoryobjectDetails for the GitHub Security Advisory.
security_vulnerabilityobjectDetails pertaining to one vulnerable version range for the advisory.
statestringThe state of the Dependabot alert.
updated_atstringThe time that the alert was last updated in ISO 8601 format: YYYY-MM-DDTHH:MM:SSZ.
urlstringThe REST API URL of the alert resource.

Methods

NameAccessible byRequired ParamsDescription
get_alertSELECTalert_number, owner, repoYou must use an access token with the security_events scope to use this endpoint with private repositories.
You can also use tokens with the public_repo scope for public repositories only.
GitHub Apps must have Dependabot alerts read permission to use this endpoint.
list_alerts_for_repoSELECTowner, repoYou must use an access token with the security_events scope to use this endpoint with private repositories.
You can also use tokens with the public_repo scope for public repositories only.
GitHub Apps must have Dependabot alerts read permission to use this endpoint.
update_alertEXECalert_number, owner, repo, data__stateYou must use an access token with the security_events scope to use this endpoint with private repositories.
You can also use tokens with the public_repo scope for public repositories only.
GitHub Apps must have Dependabot alerts write permission to use this endpoint.

To use this endpoint, you must have access to security alerts for the repository. For more information, see "Granting access to security alerts."