Improving the code scanning REST API `updated_at` field
The code scanning REST API updated_at field has been improved to help you review your most recently changed alerts. The updated_at timestamp now returns the alert’s most recent state change…
The code scanning REST API updated_at field has been improved to help you review your most recently changed alerts. The updated_at timestamp now returns the alert’s most recent state change…
You can now use the REST API to request a CVE identifier for your repository security advisories. Learn more about repository security advisories and CVE identification numbers.
You can now use the REST API to get global security advisories from the Advisory Database. This makes it easy to get access to the Advisory Database’s free, open source…
You can now use the REST API to add collaborators to your draft security advisory. Learn more about the repository security advisories REST API
You can now use the REST API to open a private vulnerability report on open-source repositories that have this feature enabled. Learn more about the repository security advisories REST API
Following our recent release of generating a software bill of materials from the repository’s dependency graph, you can now generate an SBOM for a repository using a new REST API…
You can now programmatically view and act on repository advisories via a new REST API. New endpoints to create, view, list, and update advisories are available to all. Additionally, new…
GitHub enterprise and organization owners can now use a REST API to delete their organizations and all corresponding repositories. Organization names will be locked for 90 days following the organization…
You can now view (GET) the security feature enablement status for all repositories in your organization using the “list organization repositories” endpoint in the REST API for the following security…
Enterprise and organizations administrators can now create personal access tokens (classic) and OAuth apps with the read:audit_log scope to access the Audit Log REST API. Why is this important? Stolen…
Enterprises with GitHub Advanced Security can now enable secret scanning and push protection on all their organizations using a single call to an enterprise-level REST API endpoint. You can also…
You can now unarchive a repository via the REST API. Previously, unarchiving was only available via the GraphQL API or the UI. Learn more about updating repositories via the REST…
GitHub organizations can now use the code scanning organization-level API endpoint to retrieve code scanning alerts on public repositories; this no longer requires a GitHub Advanced Security license. This new…
Today, we’re introducing calendar-based versioning for the REST API to give API integrators a smooth migration path and plenty of time to update their integrations when we need to make…
We’re introducing calendar-based versioning for our REST API, so we can keep evolving our API, whilst still giving integrators a smooth migration path and plenty of time to update their integrations.
You can now retrieve all your Dependabot alerts at the GitHub enterprise level via the REST API. This new API endpoint supplements the recently introduced Dependabot alerts REST API, Dependabot…
You can now retrieve all your Dependabot alerts at the GitHub organization level via the REST API. This new API endpoint supplements the recently introduced Dependabot alerts REST API and…
You can now programmatically view and act on Dependabot alerts via the REST API. New endpoints to view, list, and update Dependabot alerts are available in a public beta. For…
At the organization level, you can now view (GET) and update (PATCH) enablement status as well as configure the setting to automatically enable new repositories for the following GitHub security…
Organizations participating in the security manager role public beta may now manage security manager teams via the GitHub REST API. In addition, legacy organizations can now participate in the public…
GitHub Advanced Security customers can now retrieve repository code scanning results at the enterprise level via the GitHub REST API. This new endpoint supplements the existing repository-level and organization-level endpoints.…
Build what’s next on GitHub, the place for anyone from anywhere to build anything.
Catch up on the key announcements shaping the future of software development.