Skip to content

Conversation

@eslerm
Copy link

@eslerm eslerm commented Dec 5, 2025

Adds private_vulnerability_reporting to the github_repository resource's security_and_analysis block.

Implementation uses dedicated GitHub API endpoints rather than the repository Edit API, since PVR status is not included in the SecurityAndAnalysis response:

  • EnablePrivateReporting/DisablePrivateReporting for writes
  • IsPrivateReportingEnabled for reads
  • Gracefully handles repos where PVR is unavailable

Changes:

  • Add private_vulnerability_reporting schema field (Optional, Computed)
  • Add updatePrivateVulnerabilityReporting helper function
  • Fetch and merge PVR status separately in Read function
  • Add acceptance test for public repository PVR management
  • Add documentation for private_vulnerability_reporting field

Resolves #2399

Adds private_vulnerability_reporting to the github_repository resource's
security_and_analysis block.

Implementation uses dedicated GitHub API endpoints rather than the repository
Edit API, since PVR status is not included in the SecurityAndAnalysis response:
- EnablePrivateReporting/DisablePrivateReporting for writes
- IsPrivateReportingEnabled for reads
- Gracefully handles repos where PVR is unavailable

Changes:
- Add private_vulnerability_reporting schema field (Optional, Computed)
- Add updatePrivateVulnerabilityReporting helper function
- Fetch and merge PVR status separately in Read function
- Add acceptance test for public repository PVR management
- Add documentation for private_vulnerability_reporting field

Resolves integrations#2399
@github-actions github-actions bot added the Type: Feature New feature or request label Dec 5, 2025
Copy link

@cpanato cpanato left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

+1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Type: Feature New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[FEAT]: Add "Privately reporting a security vulnerability" feature

2 participants