セキュリティ アドバイザリ

セキュリティ アドバイザリ カテゴリの GraphQL スキーマ型のリファレンス ドキュメント。

この記事で

Queries

securityAdvisories

Query

GitHub Security Advisories.

タイプ: SecurityAdvisoryConnection!

securityAdvisories の引数

名前説明

after (String)

Returns the elements in the list that come after the specified cursor.

before (String)

Returns the elements in the list that come before the specified cursor.

classifications ([SecurityAdvisoryClassification!])

A list of classifications to filter advisories by.

epssPercentage (Float)

The EPSS percentage to filter advisories by.

epssPercentile (Float)

The EPSS percentile to filter advisories by.

first (Int)

Returns the first n elements from the list.

identifier (SecurityAdvisoryIdentifierFilter)

Filter advisories by identifier, e.g. GHSA or CVE.

last (Int)

Returns the last n elements from the list.

orderBy (SecurityAdvisoryOrder)

Ordering options for the returned topics.

publishedSince (DateTime)

Filter advisories to those published since a time in the past.

updatedSince (DateTime)

Filter advisories to those updated since a time in the past.

securityAdvisory

Query

Fetch a Security Advisory by its GHSA ID.

タイプ: SecurityAdvisory

securityAdvisory の引数

名前説明

ghsaId (String!)

GitHub Security Advisory ID.

securityVulnerabilities

Query

Software Vulnerabilities documented by GitHub Security Advisories.

タイプ: SecurityVulnerabilityConnection!

securityVulnerabilities の引数

名前説明

after (String)

Returns the elements in the list that come after the specified cursor.

before (String)

Returns the elements in the list that come before the specified cursor.

classifications ([SecurityAdvisoryClassification!])

A list of advisory classifications to filter vulnerabilities by.

ecosystem (SecurityAdvisoryEcosystem)

An ecosystem to filter vulnerabilities by.

first (Int)

Returns the first n elements from the list.

last (Int)

Returns the last n elements from the list.

orderBy (SecurityVulnerabilityOrder)

Ordering options for the returned topics.

package (String)

A package name to filter vulnerabilities by.

severities ([SecurityAdvisorySeverity!])

A list of severities to filter vulnerabilities by.

Objects

CVSS

Object

The Common Vulnerability Scoring System.

CVSS のフィールド

名前説明

score (Float!)

The CVSS score associated with this advisory.

vectorString (String)

The CVSS vector string associated with this advisory.

CvssSeverities

Object

The Common Vulnerability Scoring System.

CvssSeverities のフィールド

名前説明

cvssV3 (CVSS)

The CVSS v3 severity associated with this advisory.

cvssV4 (CVSS)

The CVSS v4 severity associated with this advisory.

CWE

Object

A common weakness enumeration.

CWE 実装

CWE のフィールド

名前説明

cweId (String!)

The id of the CWE.

description (String!)

A detailed description of this CWE.

id (ID!)

The Node ID of the CWE object.

name (String!)

The name of this CWE.

CWEConnection

Object

The connection type for CWE.

CWEConnection のフィールド

名前説明

edges ([CWEEdge])

A list of edges.

nodes ([CWE])

A list of nodes.

pageInfo (PageInfo!)

Information to aid in pagination.

totalCount (Int!)

Identifies the total count of items in the connection.

CWEEdge

Object

An edge in a connection.

CWEEdge のフィールド

名前説明

cursor (String!)

A cursor for use in pagination.

node (CWE)

The item at the end of the edge.

EPSS

Object

The Exploit Prediction Scoring System.

EPSS のフィールド

名前説明

percentage (Float)

The EPSS percentage represents the likelihood of a CVE being exploited.

percentile (Float)

The EPSS percentile represents the relative rank of the CVE's likelihood of being exploited compared to other CVEs.

SecurityAdvisory

Object

A GitHub Security Advisory.

SecurityAdvisory 実装

SecurityAdvisory のフィールド

名前説明

classification (SecurityAdvisoryClassification!)

The classification of the advisory.

cvss (CVSS!)

The CVSS associated with this advisory.

警告

cvss is deprecated.

cvss will be removed. New cvss_severities field will now contain both cvss_v3 and cvss_v4 properties. Removal on 2025-10-01 UTC.

cvssSeverities (CvssSeverities!)

The CVSS associated with this advisory.

cwes (CWEConnection!)

CWEs associated with this Advisory.

cwes の引数

  • after (String)

    Returns the elements in the list that come after the specified cursor.

  • before (String)

    Returns the elements in the list that come before the specified cursor.

  • first (Int)

    Returns the first n elements from the list.

  • last (