Fixing reported vulnerabilities

Build skills in collaborating on fixing security vulnerabilities in repositories.

Collaborating in a temporary private fork to resolve a repository security vulnerability

You can create a temporary private fork to privately collaborate on fixing a security vulnerability in your public repository.

Best practices for writing repository security advisories

When you create or edit security advisories, the information you provide is easier for other users to understand when you specify the ecosystem, package name, and affected versions using the standard formats.