{"meta":{"title":"Repository security advisories","intro":"The actions you can take in a repository security advisory depend on whether you have admin or write permissions to the security advisory.","product":"Security and code quality","breadcrumbs":[{"href":"/en/code-security","title":"Security and code quality"},{"href":"/en/code-security/reference","title":"Reference"},{"href":"/en/code-security/reference/permissions","title":"Permissions for security features"},{"href":"/en/code-security/reference/permissions/repository-security-advisory","title":"Repository security advisory"}],"documentType":"article"},"body":"# Repository security advisories\n\nThe actions you can take in a repository security advisory depend on whether you have admin or write permissions to the security advisory.\n\n## Permissions overview\n\nRepository owners, organization owners, security managers, and users with the **admin** role can:\n\n* Create a security advisory for the repository.\n* Access all security advisories for the repository.\n* Add collaborators to the security advisory.\n\nCollaborators have **write** permissions to the security advisory.\n\n| Action | Write permissions | Admin permissions |\n| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |\n| See a draft security advisory | | |\n| Add collaborators to the security advisory (see [Adding a collaborator to a repository security advisory](/en/code-security/how-tos/report-and-fix-vulnerabilities/fix-reported-vulnerabilities/add-collaborators)) | | |\n| Edit and delete any comments in the security advisory | | |\n| Create a temporary private fork in the security advisory (see [Collaborating in a temporary private fork to resolve a repository security vulnerability](/en/code-security/tutorials/fix-reported-vulnerabilities/collaborate-in-a-fork)) | | |\n| Add changes to a temporary private fork in the security advisory (see [Collaborating in a temporary private fork to resolve a repository security vulnerability](/en/code-security/tutorials/fix-reported-vulnerabilities/collaborate-in-a-fork)) | | |\n| Create pull requests in a temporary private fork (see [Collaborating in a temporary private fork to resolve a repository security vulnerability](/en/code-security/tutorials/fix-reported-vulnerabilities/collaborate-in-a-fork)) | | |\n| Merge changes in the security advisory (see [Collaborating in a temporary private fork to resolve a repository security vulnerability](/en/code-security/tutorials/fix-reported-vulnerabilities/collaborate-in-a-fork)) | | |\n| Add and edit metadata in the security advisory (see [Publishing a repository security advisory](/en/code-security/how-tos/report-and-fix-vulnerabilities/fix-reported-vulnerabilities/publish-repository-advisory)) | | |\n| Add and remove credits for a security advisory (see [Editing a repository security advisory](/en/code-security/how-tos/report-and-fix-vulnerabilities/fix-reported-vulnerabilities/edit-repository-advisories)) | | |\n| Close the draft security advisory | | |\n| Publish the security advisory (see [Publishing a repository security advisory](/en/code-security/how-tos/report-and-fix-vulnerabilities/fix-reported-vulnerabilities/publish-repository-advisory)) | | |\n\n### Permission differences for global security advisories\n\nUnlike repository security advisories, anyone can contribute to **global security advisories** in the GitHub Advisory Database at [github.com/advisories](https://github.com/advisories). Edits to global advisories will not change or affect how the advisory appears on the repository. See [Editing security advisories in the GitHub Advisory Database](/en/code-security/how-tos/report-and-fix-vulnerabilities/fix-reported-vulnerabilities/edit-advisory-database).\n\n## Further reading\n\n* [Adding a collaborator to a repository security advisory](/en/code-security/how-tos/report-and-fix-vulnerabilities/fix-reported-vulnerabilities/add-collaborators)\n* [Collaborating in a temporary private fork to resolve a repository security vulnerability](/en/code-security/tutorials/fix-reported-vulnerabilities/collaborate-in-a-fork)\n* [Removing a collaborator from a repository security advisory](/en/code-security/how-tos/report-and-fix-vulnerabilities/fix-reported-vulnerabilities/remove-collaborators)\n* [Deleting a repository security advisory](/en/code-security/how-tos/report-and-fix-vulnerabilities/fix-reported-vulnerabilities/delete-repository-advisories)"}