Skip to content

editing-security-advisories-in-the-github-advisory-database.md

Latest commit

 

History

History
47 lines (38 loc) · 3.7 KB

editing-security-advisories-in-the-github-advisory-database.md

File metadata and controls

47 lines (38 loc) · 3.7 KB
title Editing security advisories in the GitHub Advisory Database
intro Improve advisories published in the {% data variables.product.prodname_advisory_database %} by making community contributions.
permissions {% data reusables.permissions.global-security-advisories-edit %}
redirect_from
/code-security/security-advisories/editing-security-advisories-in-the-github-advisory-database
/code-security/supply-chain-security/managing-vulnerabilities-in-your-projects-dependencies/editing-security-advisories-in-the-github-advisory-database
/code-security/dependabot/dependabot-alerts/editing-security-advisories-in-the-github-advisory-database
/code-security/security-advisories/global-security-advisories/editing-security-advisories-in-the-github-advisory-database
/code-security/security-advisories/working-with-global-security-advisories-from-the-github-advisory-database/editing-security-advisories-in-the-github-advisory-database
versions
fpt ghec ghes
*
*
*
contentType how-tos
shortTitle Edit Advisory Database
category
Report and disclose vulnerabilities

{% ifversion ghes %}

Editing advisories in the {% data variables.product.prodname_advisory_database %}

{% endif %}

  1. Navigate to https://github.com/advisories.
  2. Select the security advisory you would like to contribute to.
  3. On the right-hand side of the page, click the Suggest improvements for this vulnerability link.
  4. In the "Improve security advisory" form, make the desired improvements. You can edit or add any detail.{% ifversion fpt or ghec %} For information about correctly specifying information on the form, including affected versions, see AUTOTITLE.{% endif %}
  5. Under Reason for change, explain why you want to make this improvement. If you include links to supporting material this will help our reviewers.
  6. When you finish editing the advisory, click Submit improvements.
  7. Once you submit your community contribution, a pull request containing your changes will be created for review in github/advisory-database by the {% data variables.product.prodname_security %} curation team. If the advisory originated from a {% data variables.product.prodname_dotcom %} repository, we will also tag the original publisher for optional commentary. You can view the pull request and get notifications when it is updated or closed.

You can also open a pull request directly on an advisory file in the github/advisory-database repository. For more information, see the contribution guidelines.

{% ifversion ghes %}

Editing advisories from {% data variables.product.prodname_ghe_server %}

If you have {% data variables.product.prodname_github_connect %} enabled on your instance, you will be able to see advisories by adding /advisories to the instance url.

  1. Navigate to https://HOSTNAME/advisories.
  2. Select the security advisory you would like to contribute to.
  3. On the right-hand side of the page, click the Suggest improvements for this vulnerability on {% data variables.product.prodname_dotcom %}. link. A new tab opens with the same security advisory on {% data variables.product.prodname_dotcom %}.
  4. Edit the advisory, following steps four through six in Editing advisories in the GitHub Advisory Database above. {% endif %}