Trending:
OpenAI admin controls GitHub Issues agent approvals Gemini in Chrome UK expansion Developer tools coverage
TECHSTAGED Better software. Smarter business.

GitHub expands SecurityAdvisory GraphQL API with five new fields and two filters

By Owen Blackridge

· 2 min read

Prepared with AI assistance from source material. An individual human editorial review is not recorded for this archive article. The named archive byline has not been independently verified by TechStaged. Editorial policy and corrections.

Illustration of GraphQL API accessing GitHub Advisory Database
TechStaged-owned

Summary

  • The SecurityAdvisory object gained five new fields: cveId, sourceCodeLocation, githubReviewedAt, nvdPublishedAt, repositoryAdvisoryUrl.
  • The securityAdvisories query gained two new filters: severities and isWithdrawn.
  • These updates enable reading more of the GitHub Advisory Database directly from the GraphQL API without needing to fall back to the REST API.

GitHub has added five new read‑only fields to the SecurityAdvisory object in its GraphQL API and introduced two new filters for the securityAdvisories query. The changes are designed to reduce the need to fall back to REST and to enable more precise server-side querying of advisory data.

  • New fields: cveId, sourceCodeLocation, githubReviewedAt, nvdPublishedAt, repositoryAdvisoryUrl
  • New filters: severities and isWithdrawn

WHAT THIS MEANS FOR DEVELOPERS AND INTEGRATORS

The updates allow developers to read more of the GitHub Advisory Database directly through GraphQL without switching to the REST API, potentially reducing round trips, a single authentication path, and a single rate‑limit budget for integrations that consume advisory data. TechStaged has also covered Kubernetes v1.37 introduces Node Lifecycle Conditions to standardize Node maintenance signals.

The added fields and filters support features like severity-based triage feeds, withdrawn advisory audits, and tracking of how quickly advisories move from NVD publication to GitHub review.

THE SPECIFICS OF THE CHANGES

The SecurityAdvisory object now includes five new fields: cveId, sourceCodeLocation, githubReviewedAt, nvdPublishedAt, repositoryAdvisoryUrl.

The securityAdvisories query gains two new filters: severities and isWithdrawn. These sit alongside existing filters such as classification, identifier, EPSS, and published or updated since.

  • Five new fields: cveId, sourceCodeLocation, githubReviewedAt, nvdPublishedAt, repositoryAdvisoryUrl
  • Two new filters: severities, isWithdrawn

ADDITIVE AND READ-ONLY CHANGES

GitHub describes the changes as additive and read-only, meaning existing queries will continue to work without modification. Learn more in the GraphQL API documentation and share feedback.

SOURCES

Developer Tools Kubernetes v1.37 introduces Node Lifecycle Conditions to standardize Node maintenance signals • 3 min read Developer Tools GPT-6 Astra on GitLab Duo Agent Platform delivers faster runs and fewer tokens • 2 min read Developer Tools GitLab Duo Self-Hosted gains Bring-Your-Own-Model support with Microsoft Foundry • 3 min read Developer Tools Java Annotated Monthly September 2026 spotlights JDK 27, nine JEPs, and security-first enhancements • 2 min read Developer Tools CodeQL 2.27.3 expands Python 3.15 features and JSON data extensions: what it means for developers • 2 min read Security CVE-2026-119085 in Virtual Engineering Workbench: what readers can understand beyond the announcement • 2 min read Developer Tools Broad security patch across multiple MPS versions and Toolkit enhancements signal a new phase for JetBrains MPS • 2 min read Software Explainer: What the NAACP v. xAI ruling actually changes about data-center pollution and permits • 4 min read