10000app
10000app #0121 · PMF pre-judgment 86/100 · $18 one-time historical evidence transition pack under strong native CSV, SIEM and GRC substitutes

August 25 changes where old closed alerts live.
A successful API call can still lose history.

Map sanitized security-history queries before closed Dependabot alerts older than two years move from UI/API to administrator-downloadable archives. Separate unaffected open/current alerts from archive-bound evidence, then test the CSV-to-GRC or warehouse contract—without entering an alert, CVE, package or repository.

Map 3 history paths locally核对依据
Free · browser-only

Dependabot alert archive transition map

Transition gateADD SANITIZED RECORDS
Valid / invalid / duplicate0 / 0 / 0
Recorded / review / cannot tell0 / 0 / 0
Archive-bound / query gaps0 / 0
Role-export / fidelity-region gaps0 / 0
Import / test / cutover gaps0 / 0 / 0
Archive fixtures0 / 10
PathScope / state / ageQuery / roleExport / fidelityRegion / importTest / cutoverEvidence / owner / decision

Archive, import and evidence queue

    “Evidence recorded” proves only coherent abstract metadata. This page did not query GitHub, inspect an alert, download/parse a CSV, verify role/fidelity/region, import into a warehouse/GRC system or make an audit conclusion.

    Zero-alert-data boundary: all free analysis stays in this browser. Enter only fictional aliases, enumerated states and safe evidence references. Never paste a real repository/organization, alert number, CVE/GHSA, package/manifest, archive CSV, token, audit log or security finding. This page does not call GitHub, establish alert state/age, export or parse data, verify role/fidelity/region, import a record, determine retention or make audit/compliance conclusions. Authorized AppSec, GitHub admin, GRC, data and legal owners control every real action.

    Source ledger

    Current retention policy and official alert interfaces

    PMF pre-judgment 86/100 · $18 one-time historical evidence transition pack under strong native CSV, SIEM and GRC substitutes

    GitHub Changelog · closed security alert retentionFrom August 25, closed Dependabot alerts at least two years old move out of UI/API into full-fidelity CSV archive storage for authorized administrators and security managers; open/recent alerts and GHES differ.GitHub REST · Dependabot alertsCurrent API scopes, filters and alert fields remain the authoritative pre-transition query contract; this tool never calls the endpoint.GitHub Docs · View Dependabot alertsCurrent UI access and closed-alert handling are native substitutes; real remediation history and permissions must be verified by authorized owners.