Skip to main content

global_advisories

Overview

Nameglobal_advisories
TypeResource
Idgithub.security_advisories.global_advisories

Fields

NameDatatypeDescription
descriptionstringA detailed description of what the advisory entails.
creditsarrayThe users who contributed to the advisory.
cve_idstringThe Common Vulnerabilities and Exposures (CVE) ID.
cvssobject
cwesarray
ghsa_idstringThe GitHub Security Advisory ID.
github_reviewed_atstringThe date and time of when the advisory was reviewed by GitHub, in ISO 8601 format.
html_urlstringThe URL for the advisory.
identifiersarray
nvd_published_atstringThe date and time when the advisory was published in the National Vulnerability Database, in ISO 8601 format.
This field is only populated when the advisory is imported from the National Vulnerability Database.
published_atstringThe date and time of when the advisory was published, in ISO 8601 format.
referencesarray
repository_advisory_urlstringThe API URL for the repository advisory.
severitystringThe severity of the advisory.
source_code_locationstringThe URL of the advisory's source code.
summarystringA short summary of the advisory.
typestringThe type of advisory.
updated_atstringThe date and time of when the advisory was last updated, in ISO 8601 format.
urlstringThe API URL for the advisory.
vulnerabilitiesarrayThe products and respective version ranges affected by the advisory.
withdrawn_atstringThe date and time of when the advisory was withdrawn, in ISO 8601 format.

Methods

NameAccessible byRequired ParamsDescription
get_global_advisorySELECTghsa_idGets a global security advisory using its GitHub Security Advisory (GHSA) identifier.
list_global_advisoriesSELECTLists all global security advisories that match the specified parameters. If no other parameters are defined, the request will return only GitHub-reviewed advisories that are not malware.

By default, all responses will exclude advisories for malware, because malware are not standard vulnerabilities. To list advisories for malware, you must include the type parameter in your request, with the value malware. For more information about the different types of security advisories, see "About the GitHub Advisory database."