Skip to content

repository-security-advisory.md

Latest commit

 

History

History
52 lines (45 loc) · 5.33 KB

repository-security-advisory.md

File metadata and controls

52 lines (45 loc) · 5.33 KB
Raw
title Repository security advisories
shortTitle Repository security advisory
intro The actions you can take in a repository security advisory depend on whether you have admin or write permissions to the security advisory.
allowTitleToDifferFromFilename true
redirect_from
/code-security/reference/permissions/permission-levels-for-repository-security-advisories
/articles/permission-levels-for-maintainer-security-advisories
/github/managing-security-vulnerabilities/permission-levels-for-maintainer-security-advisories
/github/managing-security-vulnerabilities/permission-levels-for-security-advisories
/code-security/security-advisories/permission-levels-for-security-advisories
/code-security/repository-security-advisories/permission-levels-for-repository-security-advisories
/code-security/security-advisories/repository-security-advisories/permission-levels-for-repository-security-advisories
/code-security/security-advisories/working-with-repository-security-advisories/permission-levels-for-repository-security-advisories
/code-security/reference/permission-levels-for-repository-security-advisories
/code-security/reference/permissions/security-advisory-permissions
versions
fpt ghec
*
*
contentType reference
category
Report and disclose vulnerabilities

Permissions overview

{% data reusables.repositories.security-advisory-admin-permissions %}

Action Write permissions Admin permissions
See a draft security advisory {% octicon "check" aria-label="Yes" %} {% octicon "check" aria-label="Yes" %}
Add collaborators to the security advisory (see AUTOTITLE) {% octicon "x" aria-label="No" %} {% octicon "check" aria-label="Yes" %}
Edit and delete any comments in the security advisory {% octicon "check" aria-label="Yes" %} {% octicon "check" aria-label="Yes" %}
Create a temporary private fork in the security advisory (see AUTOTITLE) {% octicon "x" aria-label="No" %} {% octicon "check" aria-label="Yes" %}
Add changes to a temporary private fork in the security advisory (see AUTOTITLE) {% octicon "check" aria-label="Yes" %} {% octicon "check" aria-label="Yes" %}
Create pull requests in a temporary private fork (see AUTOTITLE) {% octicon "check" aria-label="Yes" %} {% octicon "check" aria-label="Yes" %}
Merge changes in the security advisory (see AUTOTITLE) {% octicon "x" aria-label="No" %} {% octicon "check" aria-label="Yes" %}
Add and edit metadata in the security advisory (see AUTOTITLE) {% octicon "check" aria-label="Yes" %} {% octicon "check" aria-label="Yes" %}
Add and remove credits for a security advisory (see AUTOTITLE) {% octicon "check" aria-label="Yes" %} {% octicon "check" aria-label="Yes" %}
Close the draft security advisory {% octicon "x" aria-label="No" %} {% octicon "check" aria-label="Yes" %}
Publish the security advisory (see AUTOTITLE) {% octicon "x" aria-label="No" %} {% octicon "check" aria-label="Yes" %}

Permission differences for global security advisories

Unlike repository security advisories, anyone can contribute to global security advisories in the {% data variables.product.prodname_advisory_database %} at github.com/advisories. Edits to global advisories will not change or affect how the advisory appears on the repository. See AUTOTITLE.

Further reading