GitHub Security Advisories scraper: how to get advisories by ecosystem as JSON/CSV (API, Python, no code)

Q: What data does the GitHub Security Advisories scraper return?

Each result is one row in an Apify dataset. Fields include ghsaId, summary, description, severity, classification, publishedAt, updatedAt, withdrawnAt, and more. The table above shows every field with an example value.

Q: How do I use the GitHub Security Advisories scraper from Python?

Install the apify-client package, create a client with your Apify API token, call the Actor v0iddo/github-security-advisories with an input like the one above, and read the rows from the run's dataset. The Python snippet above does exactly that.

Q: Can I use it without writing code?

Yes. Open the Actor page on Apify, fill in the input form (an example is already filled in), press Start, and download the results as JSON, CSV, Excel or HTML. You can also schedule runs there.

Q: How much does it cost?

$0.50 per 1,000 results. You pay per result row. There is no separate charge per run. Higher Apify plans pay less per result, down to $0.35 per 1,000. A new Apify account gets $5 of platform credit every month.

Q: How do I limit the number of results?

Set the maxResults input field to the number of results you need; the run stops there, so it also caps the cost of one run. You can also set a maximum cost for a run in the run options on Apify, and the run stops when it is reached.

Q: Can I send the results to Google Sheets, Make, Zapier or n8n?

Yes. Apify datasets connect to Google Sheets, Slack, Make, Zapier and n8n, and a webhook can call your own service when a run finishes. You can also export the dataset as JSON, CSV or Excel.

For each ecosystem (NPM, PIP, MAVEN, NUGET, RUBYGEMS, RUST, GO, ACTIONS, SWIFT and more), pull recent GitHub Security Advisories. This guide shows the output fields, a working input, and Python, JavaScript and cURL code for the Actor v0iddo/github-security-advisories on Apify.

Open GitHub Security Advisories scraper on Apify

What data you get

One row per result. Every row can be downloaded as JSON, CSV, Excel or HTML, or read through the API.

Field	Label	Type	Example
`ghsaId`	Ghsa Id	text	GHSA-jqc4-5cvw-7w85
`summary`	Summary	text	filelock: ReadWriteLock on the hard-link route deletes any director...
`description`	Description	text	`ReadWriteLock` and `AsyncReadWriteLock` (the SQLite-backed reader/...
`severity`	Severity	text	MODERATE
`classification`	Classification	text	GENERAL
`publishedAt`	Published At	date	2026-10-23T22:28:41Z
`updatedAt`	Updated At	date	2026-10-23T22:45:03Z
`withdrawnAt`	Withdrawn At	text
`url`	Url	URL	https://github.com/advisories/GHSA-jqc4-5cvw-7w85
`cves`	Cves	list	["CVE-2026-112937"]
`references`	References	list	["https://github.com/tox-dev/filelock/security/advisories/GHSA-jqc4...
`cwes`	Cwes	list	[{"cweId": "CWE-367", "name": null}]
`ecosystem`		text	PIP
`affected`		list	[{"package": "filelock", "vulnerableRange": ">= 4.1.0, <= 4.2.0", "...
`source`		text	osv.dev

Input example

This is the input that is pre-filled on the Actor page. Change the values for your own run.

{
  "ecosystems": [
    "NPM",
    "PIP"
  ],
  "maxResults": 20
}

Input field	Type	What it does
`ecosystems` (required)	array	Which package ecosystems to pull advisories for: NPM, PIP, MAVEN, COMPOSER, NUGET, RUBYGEMS, RUST, GO, PUB, ERLANG, ACTIONS, SWIFT, or ALL for every advisory.
`sinceDays`	integer	Advisories published in the last N days.
`maxResults`	integer	The most rows one run returns.
`githubToken`	string	Not needed: without a token the actor reads the same reviewed GitHub advisories from OSV.dev.

Output sample

Real rows from a run of the Actor. Fields that name people are left out of the sample.

[
  {
    "ghsaId": "GHSA-jqc4-5cvw-7w85",
    "summary": "filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock-* link directory name",
    "description": "`ReadWriteLock` and `AsyncReadWriteLock` (the SQLite-backed reader/writer lock) remove their private `.filelock-*` link directories with...",
    "severity": "MODERATE",
    "classification": "GENERAL",
    "publishedAt": "2026-10-23T22:28:41Z",
    "updatedAt": "2026-10-23T22:45:03Z",
    "url": "https://github.com/advisories/GHSA-jqc4-5cvw-7w85",
    "cves": [
      "CVE-2026-112937"
    ],
    "references": [
      "https://github.com/tox-dev/filelock/security/advisories/GHSA-jqc4-5cvw-7w85",
      "https://nvd.nist.gov/vuln/detail/CVE-2026-112937",
      "https://github.com/tox-dev/filelock/pull/834"
    ],
    "cwes": [
      {
        "cweId": "CWE-367",
        "name": null
      }
    ],
    "ecosystem": "PIP",
    "affected": [
      {
        "package": "filelock",
        "vulnerableRange": ">= 4.1.0, <= 4.2.0",
        "firstPatchedVersion": "4.2.1"
      }
    ],
    "source": "osv.dev"
  },
  {
    "ghsaId": "GHSA-9vhv-jxww-xfm5",
    "summary": "filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database",
    "description": "On Windows, `ReadWriteLock` and `AsyncReadWriteLock` (the SQLite-backed reader/writer lock) connect SQLite to the lock database by its pa...",
    "severity": "LOW",
    "classification": "GENERAL",
    "publishedAt": "2026-10-23T22:28:19Z",
    "updatedAt": "2026-10-23T22:45:03Z",
    "url": "https://github.com/advisories/GHSA-9vhv-jxww-xfm5",
    "cves": [
      "CVE-2026-112913"
    ],
    "references": [
      "https://github.com/tox-dev/filelock/security/advisories/GHSA-9vhv-jxww-xfm5",
      "https://github.com/tox-dev/filelock/pull/834",
      "https://github.com/tox-dev/filelock/commit/5e3f2ec0c5fb17cb2635b60b2b68bc63ab81ca2d"
    ],
    "cwes": [
      {
        "cweId": "CWE-367",
        "name": null
      }
    ],
    "ecosystem": "PIP",
    "affected": [
      {
        "package": "filelock",
        "vulnerableRange": ">= 3.20.4, <= 4.2.0",
        "firstPatchedVersion": "4.2.1"
      }
    ],
    "source": "osv.dev"
  }
]

Code: Python, JavaScript and cURL

Get your API token in Apify Console under Settings, then Integrations. The Actor id is v0iddo/github-security-advisories.

Python (apify-client)

from apify_client import ApifyClient

client = ApifyClient("YOUR_APIFY_TOKEN")

run_input = {'ecosystems': ['NPM', 'PIP'], 'maxResults': 20}

run = client.actor("v0iddo/github-security-advisories").call(run_input=run_input)
for item in client.dataset(run["defaultDatasetId"]).iterate_items():
    print(item)

JavaScript (apify-client)

import { ApifyClient } from 'apify-client';

const client = new ApifyClient({ token: 'YOUR_APIFY_TOKEN' });

const input = {
  "ecosystems": [
    "NPM",
    "PIP"
  ],
  "maxResults": 20
};

const run = await client.actor('v0iddo/github-security-advisories').call(input);
const { items } = await client.dataset(run.defaultDatasetId).listItems();
console.log(items);

cURL

curl -X POST "https://api.apify.com/v2/acts/v0iddo~github-security-advisories/run-sync-get-dataset-items" \
  -H "Authorization: Bearer YOUR_APIFY_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"ecosystems": ["NPM", "PIP"], "maxResults": 20}'

Price

$0.50 per 1,000 results. You pay per result row. There is no separate charge per run. Higher Apify plans pay less per result, down to $0.35 per 1,000. See the pricing tab for your plan. A new Apify account gets $5 of platform credit every month.

FAQ

What data does the GitHub Security Advisories scraper return?

Each result is one row in an Apify dataset. Fields include ghsaId, summary, description, severity, classification, publishedAt, updatedAt, withdrawnAt, and more. The table above shows every field with an example value.

How do I use the GitHub Security Advisories scraper from Python?

Install the apify-client package, create a client with your Apify API token, call the Actor v0iddo/github-security-advisories with an input like the one above, and read the rows from the run's dataset. The Python snippet above does exactly that.

Can I use it without writing code?

Yes. Open the Actor page on Apify, fill in the input form (an example is already filled in), press Start, and download the results as JSON, CSV, Excel or HTML. You can also schedule runs there.

How much does it cost?

$0.50 per 1,000 results. You pay per result row. There is no separate charge per run. Higher Apify plans pay less per result, down to $0.35 per 1,000. A new Apify account gets $5 of platform credit every month.

How do I limit the number of results?

Set the maxResults input field to the number of results you need; the run stops there, so it also caps the cost of one run. You can also set a maximum cost for a run in the run options on Apify, and the run stops when it is reached.

Can I send the results to Google Sheets, Make, Zapier or n8n?

Yes. Apify datasets connect to Google Sheets, Slack, Make, Zapier and n8n, and a webhook can call your own service when a run finishes. You can also export the dataset as JSON, CSV or Excel.

Open GitHub Security Advisories scraper on Apify

Related guides

GitHub Trending Scraper: Pull the GitHub Trending repository list: daily, weekly, or monthly, filtered by programming language and s...
Chrome Web Store Scraper: Snapshot Chrome Web Store extension metadata via the public listing page.
Crossref Scraper: For each query, pull recent works from Crossref's public REST API with a server-side date filter.