{
  "slug": "github-graphql-adds-security-advisory-filters-and-fields-0f51f6ef8d7c",
  "title": "GitHub GraphQL adds security advisory filters and fields",
  "tools": [
    "github-graphql-api"
  ],
  "tags": [
    "agent"
  ],
  "introduced_at": "2026-10-05T00:00:00.000Z",
  "announced_at": "2026-10-05T00:00:00.000Z",
  "effective_at": null,
  "date_basis": "source-publication",
  "status": "unknown",
  "how": {
    "incantation": "When querying GitHub Security Advisories, pass `isWithdrawn` and/or `severities` to filter results, then select the advisory metadata fields you need.",
    "examples": [
      "query { securityAdvisories(isWithdrawn: true, severities: [HIGH, CRITICAL], first: 100) { nodes { cveId githubReviewedAt nvdPublishedAt repositoryAdvisoryUrl sourceCodeLocation } } }"
    ],
    "gotchas": [
      "isWithdrawn: Boolean filter: `true` returns only withdrawn advisories; `false` excludes withdrawn advisories.",
      "severities: List of `SecurityAdvisorySeverity` values to filter advisories. Allowed values: `CRITICAL`, `HIGH`, `LOW`, `MODERATE`, `UNKNOWN`.",
      "cveId: CVE identifier for the advisory.",
      "githubReviewedAt: When GitHub Security reviewed the advisory; may differ from GitHub’s publication time.",
      "nvdPublishedAt: When NVD published its advisory record, independent of GitHub’s publishing timeline.",
      "repositoryAdvisoryUrl: URL for the associated repository security advisory, if the global advisory is linked to one.",
      "sourceCodeLocation: URL to the upstream source code relevant to the advisory."
    ]
  },
  "why_it_matters": "Query security advisories to filter withdrawn advisories or severities and retrieve additional advisory metadata.",
  "before": "The changelog records these filters and metadata fields as additions; before this change, queries could not use these new arguments or select these new fields.",
  "sources": [
    "https://docs.github.com/en/graphql/overview/changelog#schema-changes-for-2026-10-05",
    "https://docs.github.com/en/graphql/reference/security-advisories"
  ],
  "rank": 0.96024,
  "judge": {
    "publish": true,
    "judge_model": "codex-cli/gpt-6-luna+typesafe/jev-1.13.0",
    "prompt_version": "extract-v7+enrich-v2+judge-v2x3+jev-publish-v1"
  },
  "review_state": "approved",
  "provenance": {
    "run_id": "wave1b-tools-20261017",
    "verdict_id": "wave1b-tools-20261017:wave1b-tools-20261017-784234a2a677510e-2:gate",
    "evidence_hash": "bd1f5bcf3318d5f8f20d2d2ba4f7f05792172849e773b4b1ed0eca65d8c9e1fe"
  },
  "review": {
    "draft_hash": "adbefc0af43acd72c95b5a3598b5c9ff4630aa1eb9f7cff6a4313e2da22e34bb",
    "reviewer": "publication-gate",
    "reviewed_at": "2026-10-07T00:00:00.000Z",
    "decision": "wave1b-tools-20261017:gate",
    "reason": "3 of 3 judge runs approved with p_yes >= 0.9 (mean 0.96 >= 0.9; 2 needed) and Jev gave 0.68 (>= 0.6 needed)."
  }
}