Advisory feeds

Machine-readable sources. Wire these into your monitoring stack so you don't have to keep tabs open.

RSS / Atom feeds

Drop these into Feedly, NetNewsWire, Inoreader, Miniflux, or your reader of choice.

Machine-readable APIs

For automation (Slack bots, custom dashboards, CI checks):

GitHub Advisory Database (GHSA)

• Browse: github.com/advisories
• API: GET https://api.github.com/advisories?ecosystem=npm&per_page=100
• GraphQL: query securityAdvisories with date filters.

# Get the 10 latest npm advisories
gh api '/advisories?ecosystem=npm&per_page=10' --jq '.[] | {ghsa: .ghsa_id, summary, severity, published_at, identifiers}'

OSV.dev

• All-ecosystem aggregator (GHSA + Go vuln DB + RustSec + PyPA + crates.io advisories + more).
• API: osv.dev/list

# Query a specific package
curl -X POST "https://api.osv.dev/v1/query" -d '{"package":{"name":"chalk","ecosystem":"npm"}}'

npm Advisories

• npm audit reads this directly.
• Programmatic: same data as GHSA via npm registry.

Socket

• Has a free API tier for project scans.
• Docs: docs.socket.dev

CISA Known Exploited Vulnerabilities (KEV)

• JSON: cisa.gov/known-exploited-vulnerabilities.json
• Updated continuously; useful for triage prioritization.

Slack / Discord communities

These often see chatter before the blog posts:

• OWASP Slack — #supply-chain, #llm-top10.
• CNCF Slack — #tag-security, #wg-supply-chain-security.
• Anthropic Discord — Claude Code channels often pick up issues in near-real-time.
• Cursor Discord — same for Cursor.

A minimal "I want a Slack ping" setup

# GitHub Actions, runs every hour, pings Slack on new GHSA matching your stack
name: ghsa-watch
on:
  schedule: [{ cron: '0 * * * *' }]
jobs:
  check:
    runs-on: ubuntu-latest
    steps:
      - run: |
          gh api '/advisories?ecosystem=npm&per_page=20&sort=published&direction=desc' \
            --jq '.[] | select(.published_at > "'"$(date -u -d '1 hour ago' +%Y-%m-%dT%H:%M:%SZ)"'") | .html_url' \
            | while read url; do
                curl -X POST -H 'Content-type: application/json' \
                  --data "{\"text\":\"New GHSA: $url\"}" \
                  ${{ secrets.SLACK_WEBHOOK }}
              done
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

(Adjust per your stack — filter by package or severity to keep volume reasonable.)

What we use for this repo

The advisories here are sourced primarily from: Socket, Snyk, StepSecurity, Aikido, Wiz, Microsoft Security Blog, Palo Alto Unit 42, GHSA, Simon Willison, and direct vendor advisories. Cross-referenced across at least two independent sources before a full advisory file lands.