Skip to content

Add support for creating and updating repository security advisories#2631

Open
advancedresearcharray wants to merge 3 commits into
github:mainfrom
advancedresearcharray:feat/repository-security-advisory-write-2506
Open

Add support for creating and updating repository security advisories#2631
advancedresearcharray wants to merge 3 commits into
github:mainfrom
advancedresearcharray:feat/repository-security-advisory-write-2506

Conversation

@advancedresearcharray
Copy link
Copy Markdown

@advancedresearcharray advancedresearcharray commented Jun 6, 2026

Summary

  • Add create_repository_security_advisory, update_repository_security_advisory, and request_cve_for_repository_security_advisory tools to the security_advisories toolset
  • Implement REST API integration for POST/PATCH repository advisory endpoints (not yet exposed in go-github) plus CVE request via the existing client method
  • Add unit tests, tool schema snapshots, and generated README documentation

Closes #2506

Test plan

  • go test ./pkg/github -run 'Test_(Create|Update|RequestCVE|ParseAdvisory)'
  • go test ./pkg/github
  • go run ./cmd/github-mcp-server generate-docs

@advancedresearcharray advancedresearcharray requested a review from a team as a code owner June 6, 2026 21:57
@advancedresearcharray advancedresearcharray force-pushed the feat/repository-security-advisory-write-2506 branch from 6f86876 to 709eff1 Compare June 6, 2026 21:59
Expose create, update, and CVE request operations in the security_advisories toolset so security teams can manage advisories without leaving MCP workflows.

Closes github#2506
@advancedresearcharray advancedresearcharray force-pushed the feat/repository-security-advisory-write-2506 branch from 709eff1 to 2a1584f Compare June 6, 2026 21:59
@advancedresearcharray
Copy link
Copy Markdown
Author

Cleaned commit history and PR description (removed third-party attribution trailers).

PR adds three security_advisories toolset operations for repository advisory lifecycle management (create, update, CVE request) with unit tests and schema snapshots. Closes #2506.

CI workflows are awaiting maintainer approval for this fork PR.

root added 2 commits June 7, 2026 00:20
Reject update_repository_security_advisory calls that only provide
owner, repo, and ghsaId to avoid sending empty PATCH requests.
Regenerate docs so the security advisory PR only updates the
security_advisories toolset section.
@advancedresearcharray advancedresearcharray force-pushed the feat/repository-security-advisory-write-2506 branch from 343e4ea to c332b58 Compare June 7, 2026 00:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add support for creating and updating repository security advisories

1 participant