{"command":{"effect":"write","timeoutSeconds":30,"inputSchema":{"type":"object","description":"Report a security vulnerability to the maintainers of the repository.\nSee \"[Privately reporting a security vulnerability](https://docs.github.com/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability)\" for more information about private vulnerability reporting.","properties":{"path":{"type":"object","properties":{"owner":{"type":"string","description":"The account owner of the repository. The name is not case sensitive."},"repo":{"type":"string","description":"The name of the repository without the `.git` extension. The name is not case sensitive."}},"required":["owner","repo"],"additionalProperties":false},"body":{"$ref":"#/definitions/private-vulnerability-report-create","examples":[{"summary":"A newly discovered vulnerability","description":"A more in-depth description of what the problem is.","severity":"high","vulnerabilities":[{"package":{"name":"a-package","ecosystem":"npm"},"vulnerable_version_range":"< 1.0.0","patched_versions":"1.0.0","vulnerable_functions":["important_function"]}],"cwe_ids":["CWE-123"]}]}},"required":["path","body"],"additionalProperties":false,"definitions":{"private-vulnerability-report-create":{"type":"object","properties":{"summary":{"type":"string","description":"A short summary of the advisory.","maxLength":1024},"description":{"type":"string","description":"A detailed description of what the advisory impacts.","maxLength":65535},"vulnerabilities":{"type":["array","null"],"description":"An array of products affected by the vulnerability detailed in a repository security advisory.","items":{"type":"object","properties":{"package":{"description":"The name of the package affected by the vulnerability.","type":"object","properties":{"ecosystem":{"$ref":"#/definitions/security-advisory-ecosystems"},"name":{"type":["string","null"],"description":"The unique package name within its ecosystem."}},"required":["ecosystem"]},"vulnerable_version_range":{"type":["string","null"],"description":"The range of the package versions affected by the vulnerability."},"patched_versions":{"type":["string","null"],"description":"The package version(s) that resolve the vulnerability."},"vulnerable_functions":{"type":["array","null"],"description":"The functions in the package that are affected.","items":{"type":"string"}}},"required":["package"],"additionalProperties":false}},"cwe_ids":{"type":["array","null"],"description":"A list of Common Weakness Enumeration (CWE) IDs.","items":{"type":"string"}},"severity":{"type":["string","null"],"description":"The severity of the advisory. You must choose between setting this field or `cvss_vector_string`.","enum":["critical","high","medium","low"]},"cvss_vector_string":{"type":["string","null"],"description":"The CVSS vector that calculates the severity of the advisory. You must choose between setting this field or `severity`."},"start_private_fork":{"type":"boolean","description":"Whether to create a temporary private fork of the repository to collaborate on a fix. The fork is created only if you are permitted to create one; otherwise, this parameter is ignored and the report is still created.","default":false}},"required":["summary","description"],"additionalProperties":false},"security-advisory-ecosystems":{"type":"string","description":"The package's language or package management ecosystem.","enum":["rubygems","npm","pip","maven","nuget","composer","go","rust","erlang","actions","pub","other","swift"]}}},"name":"Privately report a security vulnerability","id":"github.security-advisories.create-private-vulnerability-report","example":{"path":{"owner":"octocat","repo":"hello-world"},"body":{"summary":"example","description":"example"}},"maxRequests":1,"summary":false}}