[Schema Inaccuracy] repository_vulnerability_alert webhook action create missing state auto_dismissed

Open

#5,913 opened on Jan 30, 2026 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty: 1/5
Estimated time: Under an hour
Newbie friendliness: 48/100

Issue type: Bug
Clarity: Mostly clear
Activity status: Stale
Tech stack: openapi
Domain: api

Research direction

Locate the OpenAPI schema for the repository_vulnerability_alert webhook event and inspect the allowed state values for the create action. Compare it with the reported payload, then verify that the schema represents auto_dismissed and that the repository’s validation or checks pass.

Written by the indexing model from the issue text.

Description

documentation

Schema Inaccuracy

We've seen actual payloads from GitHub with the state set to auto_dismissed for the create action of the repository_vulnerability_alert event.

Expected

The spec to match.

Reproduction Steps

Receive a webhook.

Dominant language: No language data
Stars: 1.6k
Forks: 342
Avg merge: 2h 23m
Merged PRs (30d): 57

Contributor guide

Open the contributing guide

First steps

Read the whole issue, then the project's contributing guide.
Comment on the issue to say you are picking it up — it saves two people doing the same work.
Fork the repository and make your change on a branch.
Open a pull request that references the issue number.

Similar issues

Use `charmlibs.interfaces.oauth` instead of deprecated `hydra.oauth` Open

enhancement

Difficulty 2/5 1-3 hours Newbie friendliness 70/100

canonical/paas-charm#368 · 1 comment · Opened Sep 23, 2026
Model API: distributable field returns false even when "Allow Distributed Inference Across Workers" is checked Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

gpustack/gpustack#6275 · Opened Sep 23, 2026
attachment_urls parameter descriptions do not state that the value must be a reference Open

tech debt

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

epam/ai-dial-quickapps-backend#579 · Opened Sep 23, 2026
fix: in-app bug reports carry the user-report label — ADR 0143's P1 door never fires Open

area:workflow bug ready-for-agent

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

fil-donadoni/tolaria#4409 · Opened Sep 23, 2026
PHP warning in document.php after importing a saved header template in Elementor 4.3.0 Open

status/awaiting_triage

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

elementor/elementor#37396 · Opened Sep 23, 2026

More Backend & API Design issues