Removing a collaborator from a repository security advisory

When you remove a collaborator from a repository security advisory, they lose read and write access to the security advisory's discussion and metadata.

Who can use this feature?

Repository owners, organization owners, security managers, and users with the admin role

In this article

Note

This article applies to repository-level security advisories in a public repository. To edit a global advisory in the GitHub Advisory Database, see Editing security advisories in the GitHub Advisory Database.

Removing a collaborator from a security advisory

If you remove a user from a repository or organization, and the user is also a collaborator on a security advisory, GitHub will automatically remove the user as a collaborator for the security advisory. This prevents any unauthorized access from ex-collaborators.

  1. On GitHub, navigate to the main page of the repository.

  2. Under the repository name, click Security. If you cannot see the "Security" tab, select the dropdown menu, and then click Security.

    Screenshot of a repository header showing the tabs. The "Security" tab is highlighted by a dark orange outline.

  3. In the left sidebar, under "Reporting", click Advisories.

  4. In the "Security Advisories" list, click the name of the security advisory you'd like to remove a collaborator from.

  5. On the right side of the page, under "Collaborators", find the name of the user or team you'd like to remove from the security advisory.

  6. Next to the collaborator you want to remove, click Remove.

    Screenshot of the "Collaborators" area in the right sidebar of a draft security advisory. The "Remove username" button is outlined in dark orange.

Further reading