We've shipped a couple of changes to our APIs:
- The code scanning API now returns the CodeQL query version used for an analysis. This can be used to reproduce results or confirm that an analysis used the latest query.
- Admin users can now use the REST API to enable or disable GitHub Advanced Security for repositories using the
security_and_analysis
object onrepos/:org/:repo
. In addition, admin users can check whether Advanced Security is currently enabled for a repository by using aGET /repos/{owner}/{repo}
request. These changes help you manage Advanced Security repository access at scale. For more information, see therepos
REST API documentation.