Field mapping for the GitHub Application Vulnerability Integration Integrations

reference brazil Updated Sep 10, 2026 3 min read avr-github-vuln-mapping.md
Raw file servicenow.com

Review source and target fields and view imported data on tables and records in your ServiceNow AI Platform instance.

GitHub Organizations Integration

GitHub source field ServiceNow AI platform table ServiceNow target field
login sn_vul_discovered_org name
id sn_vul_discovered_org org_id
description sn_vul_discovered_org description
url sn_vul_discovered_org url
repos_url sn_vul_discovered_org repos_url
enterprise_name (from integration config) sn_vul_discovered_org enterprise_name

GitHub Repositories Integration

GitHub source field ServiceNow AI platform table ServiceNow target field
full_name sn_vul_app_release app_name
id sn_vul_app_release source_app_id
private sn_vul_app_release description
description sn_vul_app_release description
created_at sn_vul_app_release app_creation_date
updated_at sn_vul_app_release app_updation_date
topics sn_vul_app_release source_additional_info
Custom properties (via GitHub custom properties API) sn_vul_app_release source_additional_info

GitHub Code Scanning Integration

GitHub source field ServiceNow AI platform table ServiceNow target field
repository.full_name sn_vul_app_release app_name
repository.id sn_vul_app_release source_app_id
repository.private sn_vul_app_release description
repository.description sn_vul_app_release description
GitHub source field ServiceNow AI platform table ServiceNow target field
rule.id sn_vul_app_vul_entry source_entry_id
rule.description sn_vul_app_vul_entry threat
rule.security_severity_level sn_vul_app_vul_entry normalized_severity
rule.security_severity_level sn_vul_app_vul_entry source_severity
rule.tags (CWE entries only) sn_vul_app_vul_entry cwe_list
GitHub source field ServiceNow AI platform table ServiceNow target field
repository.id sn_vul_app_vulnerable_item source_app_id
repository.full_name sn_vul_app_vulnerable_item app_name
number sn_vul_app_vulnerable_item source_avit_id
rule.id sn_vul_app_vulnerable_item source_entry_id
rule.security_severity_level sn_vul_app_vulnerable_item source_severity
html_url sn_vul_app_vulnerable_item source_link
state sn_vul_app_vulnerable_item computed_status
state sn_vul_app_vulnerable_item source_finding_status
most_recent_instance.message.text sn_vul_app_vulnerable_item description
most_recent_instance.location.path sn_vul_app_vulnerable_item location
most_recent_instance.location.start_line sn_vul_app_vulnerable_item line_number
most_recent_instance.analysis_key sn_vul_app_vulnerable_item source_additional_info
most_recent_instance.environment sn_vul_app_vulnerable_item source_additional_info
most_recent_instance.commit_sha sn_vul_app_vulnerable_item source_additional_info
most_recent_instance.classifications sn_vul_app_vulnerable_item source_additional_info
updated_at sn_vul_app_vulnerable_item last_scan_date
updated_at sn_vul_app_vulnerable_item last_found
created_at sn_vul_app_vulnerable_item first_found

GitHub Dependabot Integration

GitHub source field ServiceNow AI platform table ServiceNow target field
repository.full_name sn_vul_app_release app_name
repository.id sn_vul_app_release source_app_id
repository.private sn_vul_app_release description
repository.description sn_vul_app_release description
GitHub source field ServiceNow AI platform table ServiceNow target field
dependency.package.ecosystem + dependency.package.name sn_vul_app_package package_unique_id
dependency.package.name sn_vul_app_package package_name
dependency.manifest_path sn_vul_app_package paths
security_vulnerability.first_patched_version.identifier sn_vul_app_package fixed_package_version
GitHub source field ServiceNow AI platform table ServiceNow target field
security_advisory.ghsa_id sn_vul_app_vul_entry source_entry_id
security_advisory.summary sn_vul_app_vul_entry threat
security_advisory.severity sn_vul_app_vul_entry source_severity
security_advisory.cwes[].cwe_id + name sn_vul_app_vul_entry cwe_list
GitHub source field ServiceNow AI platform table ServiceNow target field
repository.id sn_vul_app_vulnerable_item source_app_id
repository.full_name sn_vul_app_vulnerable_item app_name
number sn_vul_app_vulnerable_item source_avit_id
security_advisory.cve_id (or ghsa_id if no CVE) sn_vul_app_vulnerable_item source_entry_id
security_advisory.severity sn_vul_app_vulnerable_item source_severity
html_url sn_vul_app_vulnerable_item source_link
state sn_vul_app_vulnerable_item computed_status
state sn_vul_app_vulnerable_item source_finding_status
dependency.scope sn_vul_app_vulnerable_item source_additional_info
dependency.manifest_path sn_vul_app_vulnerable_item source_additional_info
auto_dismissed_at sn_vul_app_vulnerable_item source_additional_info
updated_at sn_vul_app_vulnerable_item last_scan_date
updated_at sn_vul_app_vulnerable_item last_found
created_at sn_vul_app_vulnerable_item first_found

GitHub Secret Scanning Integration

GitHub source field ServiceNow AI platform table ServiceNow target field
repository.full_name sn_vul_app_release app_name
repository.id sn_vul_app_release source_app_id
repository.private sn_vul_app_release description
repository.description sn_vul_app_release description
GitHub source field ServiceNow AI platform table ServiceNow target field
secret_type (or token_type for generic secrets) sn_vul_app_vul_entry source_entry_id
secret_type_display_name (or token_type for generic secrets) sn_vul_app_vul_entry threat
GitHub source field ServiceNow AI platform table ServiceNow target field
repository.id sn_vul_app_vulnerable_item source_app_id
repository.full_name sn_vul_app_vulnerable_item app_name
number sn_vul_app_vulnerable_item source_avit_id
secret_type (or token_type for generic secrets) sn_vul_app_vulnerable_item source_entry_id
secret_type / token_type (derived) sn_vul_app_vulnerable_item scan_type
html_url sn_vul_app_vulnerable_item source_link
state sn_vul_app_vulnerable_item computed_status
state sn_vul_app_vulnerable_item source_finding_status
push_protection_bypassed sn_vul_app_vulnerable_item source_additional_info
validity sn_vul_app_vulnerable_item source_additional_info
updated_at sn_vul_app_vulnerable_item last_scan_date
updated_at sn_vul_app_vulnerable_item last_found
created_at sn_vul_app_vulnerable_item first_found

GitHub Secret Scanning Locations

GitHub source field ServiceNow AI platform table ServiceNow target field
locations[commit].details.path sn_vul_app_vulnerable_item location
locations[commit].details.start_line sn_vul_app_vulnerable_item line_number

State and severity Mappings

Applies to all alert integrations: Code Scanning, Dependabot, and Secret Scanning.

Note: All Secret Scanning findings are automatically assigned a normalized severity of 5 (Critical), regardless of their GitHub-reported severity. This is because, under Application Vulnerability Response conventions, any exposed secret is by default treated as a critical risk.

Source State Target State Target Reason
open Open
used_in_tests Open
dismissed Closed False Positive
auto_dismissed Closed False Positive
false_positive Closed False Positive
fixed Closed Fixed
revoked Closed Fixed
wont_fix Deferred Risk Accepted
Source value Target value
Critical 5
High 4
Medium 3
Low 2
Info/Unset 1
Search documentation
Search document titles and file paths on the brazil branch