↳ GitHub sourceAnalytics ruleInformational

GitHub Security Vulnerability in Repository

Description

'This alerts when there is a new security vulnerability in a GitHub repository.'

Rule type: Scheduled
Version: 1.0.3
Query frequency: 1h
Query period: 1h
Trigger: gt 0

Declared MITRE coverage

KQL query

Original query, unchanged.

GitHubRepo
| where Action == "vulnerabilityAlert"
| project TimeGenerated, DismmisedAt, Reason, vulnerableManifestFilename, Description, Link, PublishedAt, Severity, Summary

Declared entities

URL

Source provenance

GitHub

Displayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.

File: Solutions/GitHub/Analytic Rules/Security Vulnerability in Repo.yaml ↗
Commit: 9800e51 ↗
Source identifier: 5436f471-b03d-41cb-b333-65891f887c43

Additional source files 3

Solutions/GitHub/Analytic Rules/Security Vulnerability in Repo.yamlsource ↗Detections/GitHub/Security Vulnerability in Repo.yamlmigration-note ↗Solutions/GitHub/data/Solution_GitHub.jsonsolution-membership ↗

GSTEP / CATALOG TRACKING

Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 05:49 UTC

GSTEP sync dates, separate from the source content’s publication dates.