Mutations
dismissRepositoryVulnerabilityAlert
Dismisses the Dependabot alert.
Input fields for dismissRepositoryVulnerabilityAlert
Return fields for dismissRepositoryVulnerabilityAlert
| Name | Description |
|---|---|
| A unique identifier for the client performing the mutation. |
| The Dependabot alert that was dismissed. |
Objects
DependabotUpdate
A Dependabot Update for a dependency in a repository.
DependabotUpdate Implements
Fields for DependabotUpdate
| Name | Description |
|---|---|
| The error from a dependency update. |
| The associated pull request. |
| The repository associated with this node. |
DependabotUpdateError
An error produced from a Dependabot Update.
Fields for DependabotUpdateError
| Name | Description |
|---|---|
| The body of the error. |
| The error code. |
| The title of the error. |
RepositoryVulnerabilityAlert
A Dependabot alert for a repository with a dependency affected by a security vulnerability.
RepositoryVulnerabilityAlert Implements
Fields for RepositoryVulnerabilityAlert
| Name | Description |
|---|---|
| When was the alert auto-dismissed?. |
| When was the alert created?. |
| The associated Dependabot update. |
| The scope of an alert's dependency. |
| Comment explaining the reason the alert was dismissed. |
| The reason the alert was dismissed. |
| When was the alert dismissed?. |
| The user who dismissed the alert. |
| When was the alert fixed?. |
| The Node ID of the RepositoryVulnerabilityAlert object. |
| Identifies the alert number. |
| The associated repository. |
| The associated security advisory. |
| The associated security vulnerability. |
Identifies the state of the alert. | |
| The vulnerable manifest filename. |
| The vulnerable manifest path. |
| The vulnerable requirements. |
RepositoryVulnerabilityAlertConnection
The connection type for RepositoryVulnerabilityAlert.
Fields for RepositoryVulnerabilityAlertConnection
| Name | Description |
|---|---|
A list of edges. | |
| A list of nodes. |
| Information to aid in pagination. |
| Identifies the total count of items in the connection. |
RepositoryVulnerabilityAlertEdge
An edge in a connection.
Fields for RepositoryVulnerabilityAlertEdge
| Name | Description |
|---|---|
| A cursor for use in pagination. |
| The item at the end of the edge. |
Enums
DismissReason
The possible reasons that a Dependabot alert was dismissed.
Values for DismissReason
| Name | Description |
|---|---|
FIX_STARTED | A fix has already been started. |
INACCURATE | This alert is inaccurate or incorrect. |
NOT_USED | Vulnerable code is not actually used. |
NO_BANDWIDTH | No bandwidth to fix this. |
TOLERABLE_RISK | Risk is tolerable to this project. |
RepositoryVulnerabilityAlertDependencyScope
The possible scopes of an alert's dependency.
Values for RepositoryVulnerabilityAlertDependencyScope
| Name | Description |
|---|---|
DEVELOPMENT | A dependency that is only used in development. |
RUNTIME | A dependency that is leveraged during application runtime. |
RepositoryVulnerabilityAlertState
The possible states of an alert.
Values for RepositoryVulnerabilityAlertState
| Name | Description |
|---|---|
AUTO_DISMISSED | An alert that has been automatically closed by Dependabot. |
DISMISSED | An alert that has been manually closed by a user. |
FIXED | An alert that has been resolved by a code change. |
OPEN | An alert that is still open. |
Input objects
DismissRepositoryVulnerabilityAlertInput
Autogenerated input type of DismissRepositoryVulnerabilityAlert.
Input fields for DismissRepositoryVulnerabilityAlertInput
| Name | Description |
|---|---|
| A unique identifier for the client performing the mutation. |
| The reason the Dependabot alert is being dismissed. |
| The Dependabot alert ID to dismiss. |