Post

Jaime Rodríguez-Guerra
@jaimergp.dev

What I want in my GitHub Security Advisories: rjai.me/posts/2026-1... It's been a while I write in my blog or post here, but here's something I've been thinking about for some time. cc @sethmlarson.dev, since we talked about this in NYC some months ago!

rjai.meWhat I want in GitHub Security Advisories - rjai.me - A personal blog about scientific software, music and miscellaneaSecurity Advisories are a GitHub repository feature that allows users to submit vulnerability reports to repository owners in a private manner. Owners can then review the inbox of submissions, and dec...

1 repost3 likes

Seth Larson
@sethmlarson.dev

Thanks for putting this down to paper! The visibility into activity within GHSA is a huge stumbling point for maintainers that do some initial setup and then... where did all these vulnerability reports suddenly come from??? GitHub doesn't do a good enough job alerting people about this.