Repository security advisories REST API

You can now programmatically view and act on repository advisories via a new REST API. New endpoints to create, view, list, and update advisories are available to all. Additionally, new webhooks have been introduced that will alert maintainers when advisories are published or when a private vulnerability report is submitted.

Current advisory permissions extend to API usage.

• Learn more about the repository advisories REST API
• Learn more about repository security advisories
• Learn more about privately reporting a vulnerability to a repository owner