Creating a security advisory

Anyone with admin permissions to a repository can create a security advisory.

Creating a security advisory

1. On GitHub, navigate to the main page of the repository.
2. Under your repository name, click Security.
   
3. In the left sidebar, click Security advisories.
   
4. Click New draft security advisory.
   
5. Type a title for your security advisory.
   
6. Type the details about the security vulnerability that the security advisory addresses.
   
7. Type a description of the security vulnerability.
   
8. Click Create security advisory.
   

Next steps

• Comment on the draft security advisory to discuss the vulnerability with your team.
• Add collaborators to the security advisory. For more information, see "Adding a collaborator to a security advisory."
• Privately collaborate to fix the vulnerability in a temporary private fork. For more information, see "Collaborating in a temporary private fork to resolve a security vulnerability."
• Add individuals who should receive credit for contributing to the security advisory. For more information, see "Editing a security advisory."
• Publish the security advisory to notify your community of the security vulnerability. For more information, see "Publishing a security advisory."