Tell HN: GitHub's Dependabot REST API is silently returning incomplete results

7•zetaben•1d ago

As of this morning (March 27, 2026), the GitHub Dependabot Alerts REST API endpoint (GET /repos/{owner}/{repo}/dependabot/alerts) is silently returning empty or partial results.

Our app hits this endpoint across hundreds of GitHub orgs. Starting around 07:00 UTC today, we noticed massive drops in alert counts. Digging in, we confirmed the API simply isn't returning alerts that are clearly visible in the GitHub UI.

Reproducible example on our own org:

    $ gh api repos/{org}/{repo}/dependabot/alerts
    []

Meanwhile https://github.com/{org}/{repo}/security/dependabot shows 9 open alerts.

Key details: - The REST API returns [] or a fraction of the real count - The GraphQL API still returns correct results - The GitHub UI shows the right number - No error, no rate limit, no 4xx, just silently incomplete data - We're seeing this across many orgs, not just one

This is particularly nasty because there's no signal that anything is wrong. If you're relying on this endpoint for compliance or any automation, you're getting stale data right now and you won't know unless you cross-check.

Nothing on https://www.githubstatus.com as of writing.

Anyone else seeing this?

Comments

sheiyei•1h ago

You can trust Microsoft of all companies to make a product with "depend" on the name become unreliable

Bombthecat•1h ago

I think they need to replace more developers with AI.

The developers clearly make to many errors!

Lunatic666•1h ago

I have the same problem, but you can switch to the GraphQL API, it still provides the full dependabot alerts. For me it’s a lot slower though, because I need more nested queries to get the same data.

PhilipRoman•1h ago

I believe you've always been supposed to handle pagination for this API: https://docs.github.com/en/rest/using-the-rest-api/using-pag...

Paginated-by-default APIs are an annoying pattern, like GitLab CI suddenly breaking after 20 builds, etc. I wish they would start making the pagination parameters required.

Founder of GitLab battles cancer by founding companies

Show HN: Sheet Ninja – Google Sheets as a CRUD Back End for Vibe Coders

Overestimation of microplastics potentially caused by scientists' gloves

Technology: The (nearly) perfect USB cable tester does exist

AI overly affirms users asking for personal advice

CSS is DOOMed

Siclair Microvision (1977)

I turned my Kindle into my own personal newspaper

Lat.md: Agent Lattice: a knowledge graph for your codebase, written in Markdown

Show HN: Public transit systems as data – lines, stations, railcars, and history

Alzheimer's disease mortality among taxi and ambulance drivers (2024)

OpenBSD on Motorola 88000 Processors

A Verilog to Factorio Compiler and Simulator (Working RISC-V CPU)

Monado became the foundation for OpenXR runtimes

Further human + AI + proof assistant work on Knuth's "Claude Cycles" problem

Miasma: A tool to trap AI web scrapers in an endless poison pit

I decompiled the White House's new app

What if AI doesn't need more RAM but better math?

I Built an Open-World Engine for the N64 [video]

The ANSI art "telecomics" of the 1992 election

The Loneliness of a Room of One's Own

Nonfiction Publishing, Under Threat, Is More Important

A laser-based process that enables adhesive-free paper packaging

Android’s new sideload settings will carry over to new devices

OpenCiv1 – open-source rewrite of Civ1

Linux is an interpreter

The Last Contract: William T. Vollmann's Battle to Publish an Epic (2025)

Spanish legislation as a Git repo

Cat Itecture: Better Cat Window Boxes (2023)

The Hackers Who Tracked My Sleep Cycle