github_dependabot_alerts

Table for storing GitHub Dependabot alert data.

number

number
The dependabot alert number for the repository.

repository_id

Foreign key
ID of the repository associated with the alert.

state

string
State of the alert (e.g., open, fixed).

package_name

string
Name of the package causing the alert.

alert_number

number
The GitHub alert number for the dependabot alert.

dependency_package_ecosystem

string
Ecosystem of the vulnerable dependency package.

dependency_package_name

string
Name of the vulnerable dependency package.

dependency_scope

string
Scope of the vulnerable dependency.

dependency_relationship

string
Relationship of the vulnerable dependency to the project.

ghsa_id

Foreign key
GitHub Security Advisory identifier associated with the alert.

cve_id

Foreign key
CVE identifier associated with the alert.

summary

string
Summary of the alert.

advisory_summary

string
Summary text from the security advisory associated with the alert.

severity

string
Severity level of the alert.

cvss_v3_score

number
CVSS v3 score for the vulnerability.

cvss_v3_vector_string

string
CVSS v3 vector string for the vulnerability.

cvss_v4_score

number
CVSS v4 score for the vulnerability.

cvss_v4_vector_string

string
CVSS v4 vector string for the vulnerability.

epss_percentage

number
EPSS percentage for the vulnerability.

epss_percentile

number
EPSS percentile for the vulnerability.

vulnerability_severity

string
Severity of the associated vulnerability.

vulnerable_version_range

string
Version range affected by the vulnerability.

first_patched_version_identifier

Foreign key
Identifier of the first version that includes a patch for the vulnerability.

source_url

string
URL for more details about the alert.

fixed_at

date
Timestamp when the alert was fixed.

dismissed_at

date
Timestamp when the alert was dismissed.

dismissed_by_login

string
GitHub login of the user who dismissed the alert.

dismissed_reason

string
Reason the alert was dismissed.

dismissed_comment

string
Comment provided when the alert was dismissed.

auto_dismissed_at

date
Timestamp when the alert was automatically dismissed.

deleted_at

date
Timestamp when the alert was deleted in GitHub.

created_at

date
Timestamp when the alert was created.

updated_at

date
Timestamp when the alert was last updated.

api_accessible

boolean
Dependabot accessible or not