Fix Vulnerabilities in a Repository
A 2-step recipe with Socket. We can help you get access.
Recipe · 2 steps
Fix Vulnerabilities in a Repository
with Socket
Confirm a repo, then fetch available fixes for its vulnerabilities.
- Read the repository to confirm it exists and capture its HEAD full scan id for context.
- Fetch available fixes for the requested vulnerabilities on the latest default-branch scan of the repository, including advisory details and the responsible direct dependencies.
What you'll need to have ready
- orgSlug: The slug of the organization.
- repoSlug: The repository slug to fetch fixes for.
- vulnerabilityIds: Comma-separated GHSA or CVE IDs, or "*" for all vulnerabilities.
- allowMajorUpdates: Whether to allow major version updates in proposed fixes.
For your developer
Arazzo workflow socket-dev:fix-repo-vulnerabilities, 2 operations: getOrgRepo → fetch-fixes. Specs on APIs.io.