Skip to main content

Adding a collaborator to a repository security advisory

You can add other users or teams to collaborate on a security advisory with you.

People with admin permissions to a security advisory can add collaborators to the security advisory.

Note: This article applies to editing repository-level advisories as a repository owner.

Users who are not repository owners can contribute to global security advisories in the GitHub Advisory Database at github.com/advisories. Edits to global advisories will not change or affect how the advisory appears on the repository. For more information, see "Editing security advisories in the GitHub Advisory Database."

Adding a collaborator to a security advisory

Collaborators have write permissions to the security advisory. For more information, see "Permission levels for repository security advisories."

If you remove a user from a repository or organization, and the user is also a collaborator on a security advisory, GitHub will automatically remove the user as a collaborator for the security advisory. This prevents any unauthorized access from ex-collaborators. For more information about removing a collaborator on a security advisory, see "Removing a collaborator from a repository security advisory."

  1. On GitHub.com, navigate to the main page of the repository.
  2. Under the repository name, click Security. If you cannot see the "Security" tab, select the dropdown menu, and then click Security. Screenshot of a repository header showing the tabs. The "Security" tab is highlighted by a dark orange outline.
  3. In the left sidebar, under "Reporting", click Advisories.
  4. In the "Security Advisories" list, click the security advisory you'd like to add a collaborator to.
  5. On the right side of the page, under "Collaborators", type the name of the user or team you'd like to add to the security advisory.
  6. Click to add the selected user or team as a collaborator. Screenshot of the "Collaborators" area in the right sidebar of a draft security advisory. The "Add collaborator" button, a plus icon, is outlined in dark orange.

Further reading