Skip to content

Add support for creating and updating repository security advisories#2631

Open
advancedresearcharray wants to merge 1 commit into
github:mainfrom
advancedresearcharray:feat/repository-security-advisory-write-2506
Open

Add support for creating and updating repository security advisories#2631
advancedresearcharray wants to merge 1 commit into
github:mainfrom
advancedresearcharray:feat/repository-security-advisory-write-2506

Conversation

@advancedresearcharray

@advancedresearcharray advancedresearcharray commented Jun 6, 2026

Copy link
Copy Markdown

Summary

  • Add create_repository_security_advisory, update_repository_security_advisory, and request_cve_for_repository_security_advisory tools to the security_advisories toolset
  • Implement REST API integration for POST/PATCH repository advisory endpoints (not yet exposed in go-github) plus CVE request via the existing client method
  • Add unit tests, tool schema snapshots, and generated README documentation

Closes #2506

Test plan

  • go test ./pkg/github -run 'Test_(Create|Update|RequestCVE|ParseAdvisory)'
  • go test ./pkg/github
  • go run ./cmd/github-mcp-server generate-docs

@advancedresearcharray advancedresearcharray requested a review from a team as a code owner June 6, 2026 21:57
@advancedresearcharray advancedresearcharray force-pushed the feat/repository-security-advisory-write-2506 branch 2 times, most recently from 709eff1 to 2a1584f Compare June 6, 2026 21:59
@advancedresearcharray

Copy link
Copy Markdown
Author

Cleaned commit history and PR description (removed third-party attribution trailers).

PR adds three security_advisories toolset operations for repository advisory lifecycle management (create, update, CVE request) with unit tests and schema snapshots. Closes #2506.

CI workflows are awaiting maintainer approval for this fork PR.

@advancedresearcharray advancedresearcharray force-pushed the feat/repository-security-advisory-write-2506 branch 8 times, most recently from b1a3997 to d011eee Compare June 10, 2026 09:16
…t tools

Add MCP tools for the repository security advisory lifecycle:
create_repository_security_advisory, update_repository_security_advisory,
and request_cve_for_repository_security_advisory.

Create requires exactly one of severity or cvssVectorString. Update uses
presence detection so optional string fields can be cleared, validates
GHSA IDs before path interpolation, and enforces MCP safety annotations.
@advancedresearcharray advancedresearcharray force-pushed the feat/repository-security-advisory-write-2506 branch from d011eee to 55952fd Compare June 10, 2026 09:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add support for creating and updating repository security advisories

1 participant