GitHub has updated its SecurityAdvisory GraphQL API to include five new fields, allowing developers to query more of the GitHub Advisory Database directly. According to the GitHub Changelog, users can now access these data points without needing to switch to the REST API.
API Expansion Background
GraphQL APIs are commonly used by developers to request specific data structures in a single query, reducing the number of round trips required compared to traditional REST endpoints. By expanding the SecurityAdvisory object to include identifiers such as the cveId, GitHub is streamlining how automated security tools and vulnerability scanners pull advisory information from its platform.
What Remains Unclear
The announcement did not specify the exact names of all five newly added fields beyond the cveId, nor did it detail any rate limit changes associated with the expanded queries. Developers will need to consult the updated API documentation directly to review the full schema changes and integrate the new data points into their existing workflows.
As developer tooling continues to shift toward more comprehensive GraphQL support, updates like this aim to reduce reliance on legacy REST endpoints.
Lead image: Godfrey Atima / Pexels
