[Schema Inaccuracy] Example and schema mismatch for `#/paths/~1repos~1{owner}~1{repo}~1dependabot~1alerts/get`

Open

#5,628 opened on Nov 8, 2025 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty: 2/5
Estimated time: 1-3 hours
Newbie friendliness: 52/100

Issue type: Bug
Clarity: Mostly clear
Activity status: Stale
Tech stack: openapi
Domain: api

Research direction

Start by locating the OpenAPI definitions for the two Dependabot alerts GET paths and the referenced dependabot-alerts-for-repository example. Compare the epss schema element with the example array, then verify both path schemas and examples are synchronized in the affected API descriptions.

Written by the indexing model from the issue text.

Description

feature

Schema Inaccuracy

This is the json ref for the example

#/components/examples/dependabot-alerts-for-repository/value

Schema and example mismatch. The schema has an element. The example has an array.

Here's a snippet

   49:         "vector_string" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
   50:         "score" : 8.7
   51:       }
   52:     },
>  53:     "epss" : [ {
   54:       "percentage" : 4.5E-4,
   55:       "percentile" : "0.16001e0"
   56:     } ],
   57:     "cwes" : [ {

Same problem found in

#/paths/~1repos~1{owner}~1{repo}~1dependabot~1alerts~1{alert_number}/get

Expected

The schema and example are in sync

Reproduction Steps

I could reproduce this in

fpt
ghec
ghes-3.16
ghes-3.17
ghes-3.18

Dominant language: No language data
Stars: 1.6k
Forks: 342
Avg merge: 2h 23m
Merged PRs (30d): 57

Contributor guide

Open the contributing guide

First steps

Read the whole issue, then the project's contributing guide.
Comment on the issue to say you are picking it up — it saves two people doing the same work.
Fork the repository and make your change on a branch.
Open a pull request that references the issue number.

Similar issues

[Bug]: Discord Activity titles with emoji are rejected as over 80 characters when they are not Open

clawsweeper:linked-pr-open clawsweeper:no-new-fix-pr clawsweeper:source-repro impact:message-loss issue-rating: 🦞 diamond lobster maturity:stable P2

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

openclaw/openclaw#156094 · 1 comment · 1 reaction · Opened Sep 23, 2026
[Bug] Trino/Presto queries fail when query metadata contains non-ASCII characters Open

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

growthbook/growthbook#7100 · Opened Sep 23, 2026
Reflected XSS in loopback OAuth callback via error_description Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

punkpeye/mcp-remote#369 · Opened Sep 23, 2026
WebPubSubServiceClient.GetClientAccessUri (sync) drops the groups argument on the TokenCredential path Open

Client customer-reported needs-team-attention question Service Attention WebPubSub

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

Azure/azure-sdk-for-net#63292 · 3 comments · 1 reaction · Opened Sep 22, 2026
`GoogleModel` returns Gemini's interim thought images as output when not streaming Open

bug p:3-mid pydanty:bug

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

pydantic/pydantic-ai#8643 · 1 comment · Opened Sep 22, 2026

More Backend & API Design issues