Our app hits this endpoint across hundreds of GitHub orgs. Starting around 07:00 UTC today, we noticed massive drops in alert counts. Digging in, we confirmed the API simply isn't returning alerts that are clearly visible in the GitHub UI.
Reproducible example on our own org:
$ gh api repos/{org}/{repo}/dependabot/alerts
[]
Key details: - The REST API returns [] or a fraction of the real count - The GraphQL API still returns correct results - The GitHub UI shows the right number - No error, no rate limit, no 4xx, just silently incomplete data - We're seeing this across many orgs, not just one
This is particularly nasty because there's no signal that anything is wrong. If you're relying on this endpoint for compliance or any automation, you're getting stale data right now and you won't know unless you cross-check.
Nothing on https://www.githubstatus.com as of writing.
Anyone else seeing this?