3.8 KiB
title, intro, redirect_from, versions, type, topics, shortTitle
| title | intro | redirect_from | versions | type | topics | shortTitle | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Editing security advisories in the GitHub Advisory Database | You can submit improvements to any advisory published in the {% data variables.product.prodname_advisory_database %}. |
|
|
how_to |
|
Edit Advisory Database |
About editing advisories in the {% data variables.product.prodname_advisory_database %}
Security advisories in the {% data variables.product.prodname_advisory_database %} at github.com/advisories are considered global advisories. Anyone can suggest improvements on any global security advisory in the {% data variables.product.prodname_advisory_database %}. You can edit or add any detail, including additionally affected ecosystems, severity level or description of who is impacted. The {% data variables.product.prodname_security %} curation team will review the submitted improvements and publish them onto the {% data variables.product.prodname_advisory_database %} if accepted. {% ifversion fpt or ghec %} Only repository owners and administrators can edit repository-level security advisories. For more information, see "Editing a repository security advisory."{% endif %}
Editing advisories in the GitHub Advisory Database
- Navigate to https://github.com/advisories.
- Select the security advisory you would like to contribute to.
- On the right-hand side of the page, click the Suggest improvements for this vulnerability link.

- In the contribution form, make the desired improvements. You can edit or add any detail.
- When you finish editing the advisory, click Submit improvements.
- Once you submit your improvements, a pull request containing your changes will be created for review in github/advisory-database by the {% data variables.product.prodname_security %} curation team. If the advisory originated from a {% data variables.product.prodname_dotcom %} repository, we will also tag the original publisher for optional commentary. You can view the pull request and get notifications when it is updated or closed.
You can also open a pull request directly on an advisory file in the github/advisory-database repository. For more information, see the contribution guidelines.
{% ifversion security-advisories-ghes-ghae %}
Editing advisories from {% data variables.product.product_location %}
If you have {% data variables.product.prodname_github_connect %} enabled for {% data variables.product.product_location %}, you will be able to see advisories by adding /advisories to the instance url.
- Navigate to
https://HOSTNAME/advisories. - Select the security advisory you would like to contribute to.
- On the right-hand side of the page, click the Suggest improvements for this vulnerability on Github.com. link. A new tab opens with the same security advisory on {% data variables.product.prodname_dotcom_the_website %}.

- Edit the advisory, following steps four through six in "Editing advisories in the GitHub Advisory Database" above. {% endif %}