Want RSS feed for /advisories (Security Advisories)

[usagiga]

/advisories is pretty good, but it has no way to subscribe such as RSS feed. 😢
I want to read it from RSS reader.

[usagiga]

Finally I found official webhook!
We can use it instead of RSS feed.
https://docs.github.com/en/developers/webhooks-and-events/webhooks/webhook-events-and-payloads#security_advisory

[vorotech]

The problem with the webhook that it can be utilized only by repo owners.
But it would be nice to have the RSS/ATOM feed available for consumers of the repo.
E.g. https://github.com/discourse/discourse/security/advisories can be useful for admins who maintain the Discourse blog.

[mkurz]

I have a similiar question/request:
When a user watches only "Security alerts" for a repository, shouldn't that user get a notification from GitHub as soon a Security Advisory is published for that repo? Right now no notification will be send at all.

[mkurz]

Refering the relevant discussion: https://github.com/orgs/community/discussions/12226#discussioncomment-10142233

[StayPirate]

having something like: https://github.com/nextcloud/security-advisories/security/advisories.atom or https://github.com/nextcloud/security-advisories/security/advisories.rss would be very useful for many people/use-cases. I'm part of the security-team of a widely used downstream Linux distribution. It would be very good for us to be able to subscribe to the Security Advisory feed of projects we repackage. @github-staff can you consider to implement this feature?

[tuggan]

Just replying to keep this alive. I think @StayPirate has the right approach from my perspective.

[andresanches]

Bumping to keep the issue alive. For my use case it would be helpful to watch RSS or Atom feeds in my company's slack, which reaches a wide engineering audience.

[jduck]

Did you try https://github.com/security-advisories ?

[DanielRuf]

Is there some documentation to filter the results? I'm looking for something like https://github.com/advisories?query=node.js but as RSS / Atom feed.

[DanielRuf]

Found https://azu.github.io/github-advisory-database-rss/ which is more like what I am looking for.

[alon710]

I've been following this discussion and noticed many of you are looking for a more accessible way to track GHSAs and vulnerabilities via RSS.

I built cvereports.com to solve exactly this. It automatically generates a blog post for every new advisory and provides a dedicated RSS feed that you can plug into Slack, Discord, or your favorite reader.

Beyond just the feed, it uses a custom AI agent integrated with multiple security tools to generate detailed reports for new CVEs and GHSAs. Hope this helps bridge the gap until GitHub adds native RSS support!