1
0
mirror of synced 2026-01-06 06:02:35 -05:00
Files
docs/content/code-security/dependabot/dependabot-alerts/editing-security-advisories-in-the-github-advisory-database.md

3.8 KiB

title, intro, redirect_from, versions, type, topics, shortTitle
title intro redirect_from versions type topics shortTitle
Editing security advisories in the GitHub Advisory Database You can submit improvements to any advisory published in the {% data variables.product.prodname_advisory_database %}.
/code-security/security-advisories/editing-security-advisories-in-the-github-advisory-database
/code-security/supply-chain-security/managing-vulnerabilities-in-your-projects-dependencies/editing-security-advisories-in-the-github-advisory-database
fpt ghec ghes ghae
* * * *
how_to
Security advisories
Alerts
Dependabot
Vulnerabilities
CVEs
Edit Advisory Database

About editing advisories in the {% data variables.product.prodname_advisory_database %}

Security advisories in the {% data variables.product.prodname_advisory_database %} at github.com/advisories are considered global advisories. Anyone can suggest improvements on any global security advisory in the {% data variables.product.prodname_advisory_database %}. You can edit or add any detail, including additionally affected ecosystems, severity level or description of who is impacted. The {% data variables.product.prodname_security %} curation team will review the submitted improvements and publish them onto the {% data variables.product.prodname_advisory_database %} if accepted. {% ifversion fpt or ghec %} Only repository owners and administrators can edit repository-level security advisories. For more information, see "Editing a repository security advisory."{% endif %}

Editing advisories in the GitHub Advisory Database

  1. Navigate to https://github.com/advisories.
  2. Select the security advisory you would like to contribute to.
  3. On the right-hand side of the page, click the Suggest improvements for this vulnerability link. Suggest improvements link
  4. In the contribution form, make the desired improvements. You can edit or add any detail.
  5. When you finish editing the advisory, click Submit improvements.
  6. Once you submit your improvements, a pull request containing your changes will be created for review in github/advisory-database by the {% data variables.product.prodname_security %} curation team. If the advisory originated from a {% data variables.product.prodname_dotcom %} repository, we will also tag the original publisher for optional commentary. You can view the pull request and get notifications when it is updated or closed.

You can also open a pull request directly on an advisory file in the github/advisory-database repository. For more information, see the contribution guidelines.

{% ifversion security-advisories-ghes-ghae %}

Editing advisories from {% data variables.product.product_location %}

If you have {% data variables.product.prodname_github_connect %} enabled for {% data variables.product.product_location %}, you will be able to see advisories by adding /advisories to the instance url.

  1. Navigate to https://HOSTNAME/advisories.
  2. Select the security advisory you would like to contribute to.
  3. On the right-hand side of the page, click the Suggest improvements for this vulnerability on Github.com. link. A new tab opens with the same security advisory on {% data variables.product.prodname_dotcom_the_website %}. Suggest improvements link
  4. Edit the advisory, following steps four through six in "Editing advisories in the GitHub Advisory Database" above. {% endif %}