{
  "id": "ghsa_id",
  "kind": "datatype",
  "status": "draft",
  "name": "GitHub Security Advisory ID (GHSA)",
  "doc": "Identifier of an advisory in the GitHub Advisory Database: GHSA- and three groups of four characters separated by hyphens. The characters are random and come from the set 23456789cfghjmpqrvwx, always in lower case. An advisory that has a CVE identifier keeps its GHSA ID as well; OSV.dev also uses GHSA IDs as entry ids.",
  "is_pii": false,
  "categories": [
    "software"
  ],
  "langs": [
    "common"
  ],
  "classification": "identifier",
  "regexp": "^GHSA(?:-[23456789cfghjmpqrvwx]{4}){3}$",
  "examples": [
    {
      "value": "GHSA-jfh8-c2jp-5v3q",
      "description": "Remote code injection in Log4j (CVE-2021-44228)",
      "valid": true
    },
    {
      "value": "GHSA-vp9c-fpxx-744v",
      "description": "Example in the OSV schema documentation",
      "valid": true
    },
    {
      "value": "GHSA-JFH8-C2JP-5V3Q",
      "description": "Upper case",
      "valid": false
    },
    {
      "value": "GHSA-jfh8-c2jp-5v3a",
      "description": "The letter a is not in the alphabet",
      "valid": false
    }
  ],
  "links": [
    {
      "type": "doc",
      "url": "https://docs.github.com/en/code-security/security-advisories/working-with-global-security-advisories-from-the-github-advisory-database/about-the-github-advisory-database"
    }
  ],
  "quality": {
    "score": 75,
    "missing": [
      "mapping (Wikidata, Schema.org, ...)",
      "translation",
      "detector coverage"
    ]
  },
  "source": {
    "path": "data/datatypes/any/software/ghsa_id.yaml",
    "url": "https://github.com/apicrafter/metacrafter-registry/blob/main/data/datatypes/any/software/ghsa_id.yaml",
    "edit_url": "https://github.com/apicrafter/metacrafter-registry/edit/main/data/datatypes/any/software/ghsa_id.yaml"
  },
  "urls": {
    "html": "http://registry.apicrafter.io/datatype/ghsa_id",
    "json": "http://registry.apicrafter.io/api/v1/datatypes/ghsa_id.json"
  }
}