GitHub Community
-
|
Hi, Is there an event that gets triggered when a Security Alert is created? Kind regards, Arne |
Beta Was this translation helpful? Give feedback.
Replies: 5 comments
-
|
Yes, there is a RepositoryVulnerabilityAlertEventwhich is triggered when a sceurity alert is created, dismissed or resolved. But it cannot be used to trigger a workflow as it hasn’t been added to Events that trigger workflows. |
Beta Was this translation helpful? Give feedback.
-
|
Thank you, @eddiechenms. So an event exists. It just cant be used with GitHub Actions? Triggering a workflow was exactly I was/am hoping for. Someone please add it to a wishlist :slight_smile: |
Beta Was this translation helpful? Give feedback.
-
|
Right now we do not support that event as viewing security alerts is more restricted than simjply view or editing files. If we enabled that event anyone who could get a file into the repos could start essentially viewing security alerts. |
Beta Was this translation helpful? Give feedback.
-
|
Thank you for the explanation, @chrispat. I can see how that could be problematic. We’ll find another way to do what we wanted to do (which is create a Jira ticket for new security alerts). Kind regards, Arne |
Beta Was this translation helpful? Give feedback.
-
|
Is it currently possible to subscribe to these events? |
Beta Was this translation helpful? Give feedback.
Right now we do not support that event as viewing security alerts is more restricted than simjply view or editing files. If we enabled that event anyone who could get a file into the repos could start essentially viewing security alerts.