{ "openapi": "3.0.1", "info": { "title": "GitHub Security Advisories Scraper - GHSA CVE Data", "description": "$1/1K 🔥 Scrape the GitHub Advisory Database (GHSA): vulnerabilities with affected packages, ecosystem-specific vulnerable version ranges, first patched version, CVSS, EPSS and CWE. One row per affected package. No API key required.", "version": "0.1", "x-build-id": "4kHxfW3t9cQxYxFQL" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/ninhothedev~github-advisories-scraper/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-ninhothedev-github-advisories-scraper", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/ninhothedev~github-advisories-scraper/runs": { "post": { "operationId": "runs-sync-ninhothedev-github-advisories-scraper", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/ninhothedev~github-advisories-scraper/run-sync": { "post": { "operationId": "run-sync-ninhothedev-github-advisories-scraper", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "properties": { "mode": { "title": "Mode", "enum": [ "advisories" ], "type": "string", "description": "What to scrape. Currently the actor supports one mode: 'advisories' reads the public GitHub Advisory Database (GHSA) and returns one row per affected package.", "default": "advisories" }, "ecosystem": { "title": "Package ecosystem", "enum": [ "any", "npm", "pip", "rubygems", "maven", "nuget", "composer", "go", "rust", "actions" ], "type": "string", "description": "Only return advisories affecting packages of this ecosystem. Choose 'any' to cover all ecosystems at once. Note that one advisory can affect packages in several ecosystems.", "default": "any" }, "severity": { "title": "Severity", "enum": [ "any", "low", "medium", "high", "critical" ], "type": "string", "description": "Only return advisories with this GitHub severity rating. Use 'any' to get every severity, or 'critical' to build a patch-prioritisation shortlist.", "default": "any" }, "affectsPackage": { "title": "Affects package (optional)", "type": "string", "description": "Return only advisories affecting this exact package name, for example 'lodash', 'django' or 'org.bouncycastle:bcprov-jdk18on'. Leave empty to scrape the whole database. Must match the package name used by the ecosystem's registry." }, "advisoryType": { "title": "Advisory type", "enum": [ "reviewed", "malware", "unreviewed", "any" ], "type": "string", "description": "'reviewed' = curated advisories reviewed by GitHub (recommended, best data quality). 'malware' = malicious package advisories. 'unreviewed' = automatically imported, not yet reviewed. 'any' returns all three.", "default": "reviewed" }, "githubToken": { "title": "GitHub token (optional)", "type": "string", "description": "Optional GitHub personal access token. The advisories endpoint is public, so the actor works without one, but unauthenticated requests are limited to 60 requests per hour per IP. A token (no scopes needed) raises that limit to 5000 requests per hour, which is required for large runs." }, "maxItems": { "title": "Max items", "minimum": 1, "maximum": 5000, "type": "integer", "description": "Maximum number of dataset rows to return. Remember that one advisory can produce several rows (one per affected package), so 200 rows is roughly 100-150 advisories.", "default": 200 } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } } } } } } } } }