---
title: Field mapping for the GitHub Application Vulnerability Integration Integrations
description: Review source and target fields and view imported data on tables and records in your ServiceNow AI Platform instance.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/application-vulnerability-response/avr-github-vuln-mapping.html
release: australia
product: Application Vulnerability Response
classification: application-vulnerability-response
topic_type: reference
last_updated: "2026-04-30"
reading_time_minutes: 3
breadcrumb: [GitHub Application Vulnerability Integration, Integrate with other applications, Application Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Field mapping for the GitHub Application Vulnerability Integration Integrations

Review source and target fields and view imported data on tables and records in your ServiceNow AI Platform instance.

## GitHub Organizations Integration

|GitHub source field|ServiceNow AI platform table|ServiceNow target field|
|-------------------|----------------------------|-----------------------|
|login|sn\_vul\_discovered\_org|name|
|id|sn\_vul\_discovered\_org|org\_id|
|description|sn\_vul\_discovered\_org|description|
|url|sn\_vul\_discovered\_org|url|
|repos\_url|sn\_vul\_discovered\_org|repos\_url|
|enterprise\_name \(from integration config\)|sn\_vul\_discovered\_org|enterprise\_name|

## GitHub Repositories Integration

|GitHub source field|ServiceNow AI platform table|ServiceNow target field|
|-------------------|----------------------------|-----------------------|
|full\_name|sn\_vul\_app\_release|app\_name|
|id|sn\_vul\_app\_release|source\_app\_id|
|private|sn\_vul\_app\_release|description|
|description|sn\_vul\_app\_release|description|
|created\_at|sn\_vul\_app\_release|app\_creation\_date|
|updated\_at|sn\_vul\_app\_release|app\_updation\_date|
|topics|sn\_vul\_app\_release|source\_additional\_info|
|Custom properties \(via GitHub custom properties API\)|sn\_vul\_app\_release|source\_additional\_info|

## GitHub Code Scanning Integration

|GitHub source field|ServiceNow AI platform table|ServiceNow target field|
|-------------------|----------------------------|-----------------------|
|repository.full\_name|sn\_vul\_app\_release|app\_name|
|repository.id|sn\_vul\_app\_release|source\_app\_id|
|repository.private|sn\_vul\_app\_release|description|
|repository.description|sn\_vul\_app\_release|description|

|GitHub source field|ServiceNow AI platform table|ServiceNow target field|
|-------------------|----------------------------|-----------------------|
|rule.id|sn\_vul\_app\_vul\_entry|source\_entry\_id|
|rule.description|sn\_vul\_app\_vul\_entry|threat|
|rule.security\_severity\_level|sn\_vul\_app\_vul\_entry|normalized\_severity|
|rule.security\_severity\_level|sn\_vul\_app\_vul\_entry|source\_severity|
|rule.tags \(CWE entries only\)|sn\_vul\_app\_vul\_entry|cwe\_list|

|GitHub source field|ServiceNow AI platform table|ServiceNow target field|
|-------------------|----------------------------|-----------------------|
|repository.id|sn\_vul\_app\_vulnerable\_item|source\_app\_id|
|repository.full\_name|sn\_vul\_app\_vulnerable\_item|app\_name|
|number|sn\_vul\_app\_vulnerable\_item|source\_avit\_id|
|rule.id|sn\_vul\_app\_vulnerable\_item|source\_entry\_id|
|rule.security\_severity\_level|sn\_vul\_app\_vulnerable\_item|source\_severity|
|html\_url|sn\_vul\_app\_vulnerable\_item|source\_link|
|state|sn\_vul\_app\_vulnerable\_item|computed\_status|
|state|sn\_vul\_app\_vulnerable\_item|source\_finding\_status|
|most\_recent\_instance.message.text|sn\_vul\_app\_vulnerable\_item|description|
|most\_recent\_instance.location.path|sn\_vul\_app\_vulnerable\_item|location|
|most\_recent\_instance.location.start\_line|sn\_vul\_app\_vulnerable\_item|line\_number|
|most\_recent\_instance.analysis\_key|sn\_vul\_app\_vulnerable\_item|source\_additional\_info|
|most\_recent\_instance.environment|sn\_vul\_app\_vulnerable\_item|source\_additional\_info|
|most\_recent\_instance.commit\_sha|sn\_vul\_app\_vulnerable\_item|source\_additional\_info|
|most\_recent\_instance.classifications|sn\_vul\_app\_vulnerable\_item|source\_additional\_info|
|updated\_at|sn\_vul\_app\_vulnerable\_item|last\_scan\_date|
|updated\_at|sn\_vul\_app\_vulnerable\_item|last\_found|
|created\_at|sn\_vul\_app\_vulnerable\_item|first\_found|

## GitHub Dependabot Integration

|GitHub source field|ServiceNow AI platform table|ServiceNow target field|
|-------------------|----------------------------|-----------------------|
|repository.full\_name|sn\_vul\_app\_release|app\_name|
|repository.id|sn\_vul\_app\_release|source\_app\_id|
|repository.private|sn\_vul\_app\_release|description|
|repository.description|sn\_vul\_app\_release|description|

|GitHub source field|ServiceNow AI platform table|ServiceNow target field|
|-------------------|----------------------------|-----------------------|
|dependency.package.ecosystem + dependency.package.name|sn\_vul\_app\_package|package\_unique\_id|
|dependency.package.name|sn\_vul\_app\_package|package\_name|
|dependency.manifest\_path|sn\_vul\_app\_package|paths|
|security\_vulnerability.first\_patched\_version.identifier|sn\_vul\_app\_package|fixed\_package\_version|

|GitHub source field|ServiceNow AI platform table|ServiceNow target field|
|-------------------|----------------------------|-----------------------|
|security\_advisory.ghsa\_id|sn\_vul\_app\_vul\_entry|source\_entry\_id|
|security\_advisory.summary|sn\_vul\_app\_vul\_entry|threat|
|security\_advisory.severity|sn\_vul\_app\_vul\_entry|source\_severity|
|security\_advisory.cwes\[\].cwe\_id + name|sn\_vul\_app\_vul\_entry|cwe\_list|

|GitHub source field|ServiceNow AI platform table|ServiceNow target field|
|-------------------|----------------------------|-----------------------|
|repository.id|sn\_vul\_app\_vulnerable\_item|source\_app\_id|
|repository.full\_name|sn\_vul\_app\_vulnerable\_item|app\_name|
|number|sn\_vul\_app\_vulnerable\_item|source\_avit\_id|
|security\_advisory.cve\_id *\(or ghsa\_id if no CVE\)*|sn\_vul\_app\_vulnerable\_item|source\_entry\_id|
|security\_advisory.severity|sn\_vul\_app\_vulnerable\_item|source\_severity|
|html\_url|sn\_vul\_app\_vulnerable\_item|source\_link|
|state|sn\_vul\_app\_vulnerable\_item|computed\_status|
|state|sn\_vul\_app\_vulnerable\_item|source\_finding\_status|
|dependency.scope|sn\_vul\_app\_vulnerable\_item|source\_additional\_info|
|dependency.manifest\_path|sn\_vul\_app\_vulnerable\_item|source\_additional\_info|
|auto\_dismissed\_at|sn\_vul\_app\_vulnerable\_item|source\_additional\_info|
|updated\_at|sn\_vul\_app\_vulnerable\_item|last\_scan\_date|
|updated\_at|sn\_vul\_app\_vulnerable\_item|last\_found|
|created\_at|sn\_vul\_app\_vulnerable\_item|first\_found|

## GitHub Secret Scanning Integration

|GitHub source field|ServiceNow AI platform table|ServiceNow target field|
|-------------------|----------------------------|-----------------------|
|repository.full\_name|sn\_vul\_app\_release|app\_name|
|repository.id|sn\_vul\_app\_release|source\_app\_id|
|repository.private|sn\_vul\_app\_release|description|
|repository.description|sn\_vul\_app\_release|description|

|GitHub source field|ServiceNow AI platform table|ServiceNow target field|
|-------------------|----------------------------|-----------------------|
|secret\_type *\(or token\_type for generic secrets\)*|sn\_vul\_app\_vul\_entry|source\_entry\_id|
|secret\_type\_display\_name \(or token\_type for generic secrets\)|sn\_vul\_app\_vul\_entry|threat|

|GitHub source field|ServiceNow AI platform table|ServiceNow target field|
|-------------------|----------------------------|-----------------------|
|repository.id|sn\_vul\_app\_vulnerable\_item|source\_app\_id|
|repository.full\_name|sn\_vul\_app\_vulnerable\_item|app\_name|
|number|sn\_vul\_app\_vulnerable\_item|source\_avit\_id|
|secret\_type *\(or token\_type for generic secrets\)*|sn\_vul\_app\_vulnerable\_item|source\_entry\_id|
|secret\_type / token\_type \(derived\)|sn\_vul\_app\_vulnerable\_item|scan\_type|
|html\_url|sn\_vul\_app\_vulnerable\_item|source\_link|
|state|sn\_vul\_app\_vulnerable\_item|computed\_status|
|state|sn\_vul\_app\_vulnerable\_item|source\_finding\_status|
|push\_protection\_bypassed|sn\_vul\_app\_vulnerable\_item|source\_additional\_info|
|validity|sn\_vul\_app\_vulnerable\_item|source\_additional\_info|
|updated\_at|sn\_vul\_app\_vulnerable\_item|last\_scan\_date|
|updated\_at|sn\_vul\_app\_vulnerable\_item|last\_found|
|created\_at|sn\_vul\_app\_vulnerable\_item|first\_found|

## GitHub Secret Scanning Locations

|GitHub source field|ServiceNow AI platform table|ServiceNow target field|
|-------------------|----------------------------|-----------------------|
|locations\[commit\].details.path|sn\_vul\_app\_vulnerable\_item|location|
|locations\[commit\].details.start\_line|sn\_vul\_app\_vulnerable\_item|line\_number|

## State and severity Mappings

Applies to all alert integrations: Code Scanning, Dependabot, and Secret Scanning.

**Note:** All Secret Scanning findings are automatically assigned a normalized severity of 5 \(Critical\), regardless of their GitHub-reported severity. This is because, under Application Vulnerability Response conventions, any exposed secret is by default treated as a critical risk.

|Source State|Target State|Target Reason|
|------------|------------|-------------|
|open|Open| |
|used\_in\_tests|Open| |
|dismissed|Closed|False Positive|
|auto\_dismissed|Closed|False Positive|
|false\_positive|Closed|False Positive|
|fixed|Closed|Fixed|
|revoked|Closed|Fixed|
|wont\_fix|Deferred|Risk Accepted|

|Source value|Target value|
|------------|------------|
|Critical|5|
|High|4|
|Medium|3|
|Low|2|
|Info/Unset|1|