SECURITY.md

@@ -0,0 +1,12 @@
+# Security Policy
+
+Thanks for helping make GitHub Open Source Software safe for everyone.
+
+GitHub takes the security of our software products and services seriously, including all of the open source code repositories managed through our GitHub organizations, such as [Octokit](https://github.com/octokit).
+
+Even though [open source repositories are outside of the scope of our bug bounty program](https://bounty.github.com/index.html#scope) and therefore not eligible for bounty rewards, we want to make sure that your finding gets passed along to the maintainers of this project for remediation. 
+
+
+## Reporting a Vulnerability
+
+Since this source is part of [Octokit](https://github.com/octokit) (a GitHub organization) we ask that you follow the guidelines [here](https://github.com/github/.github/blob/master/SECURITY.md#reporting-security-issues) to report anything that you might've found.

docs/activity/deleteThreadSubscription.md

@@ -29,7 +29,7 @@ octokit.rest.activity.deleteThreadSubscription({
   <tbody>
     <tr><td>thread_id</td><td>yes</td><td>
 
-The unique identifier of the thread.
+The unique identifier of the pull request thread.
 
 </td></tr>
   </tbody>

docs/activity/getThread.md

@@ -27,7 +27,7 @@ octokit.rest.activity.getThread({
   <tbody>
     <tr><td>thread_id</td><td>yes</td><td>
 
-The unique identifier of the thread.
+The unique identifier of the pull request thread.
 
 </td></tr>
   </tbody>

docs/activity/getThreadSubscriptionForAuthenticatedUser.md

@@ -31,7 +31,7 @@ octokit.rest.activity.getThreadSubscriptionForAuthenticatedUser({
   <tbody>
     <tr><td>thread_id</td><td>yes</td><td>
 
-The unique identifier of the thread.
+The unique identifier of the pull request thread.
 
 </td></tr>
   </tbody>

docs/activity/markNotificationsAsRead.md

@@ -27,7 +27,7 @@ octokit.rest.activity.markNotificationsAsRead();
   <tbody>
     <tr><td>last_read_at</td><td>no</td><td>
 
-Describes the last point that notifications were checked.
+Describes the last point that notifications were checked. Anything updated since this time will not be marked as read. If you omit this parameter, all notifications are marked as read. This is a timestamp in [ISO 8601](https://en.wikipedia.org/wiki/ISO_8601) format: `YYYY-MM-DDTHH:MM:SSZ`. Default: The current timestamp.
 
 </td></tr>
 <tr><td>read</td><td>no</td><td>

docs/activity/markThreadAsRead.md

@@ -27,7 +27,7 @@ octokit.rest.activity.markThreadAsRead({
   <tbody>
     <tr><td>thread_id</td><td>yes</td><td>
 
-The unique identifier of the thread.
+The unique identifier of the pull request thread.
 
 </td></tr>
   </tbody>

docs/activity/setThreadSubscription.md

@@ -33,7 +33,7 @@ octokit.rest.activity.setThreadSubscription({
   <tbody>
     <tr><td>thread_id</td><td>yes</td><td>
 
-The unique identifier of the thread.
+The unique identifier of the pull request thread.
 
 </td></tr>
 <tr><td>ignored</td><td>no</td><td>

docs/repos/checkVulnerabilityAlerts.md

@@ -8,7 +8,7 @@ type: API method
 
 # Check if vulnerability alerts are enabled for a repository
 
-Shows whether dependency alerts are enabled or disabled for a repository. The authenticated user must have admin access to the repository. For more information, see "[About security alerts for vulnerable dependencies](https://docs.github.com/en/articles/about-security-alerts-for-vulnerable-dependencies)".
+Shows whether dependency alerts are enabled or disabled for a repository. The authenticated user must have admin read access to the repository. For more information, see "[About security alerts for vulnerable dependencies](https://docs.github.com/en/articles/about-security-alerts-for-vulnerable-dependencies)".
 
 ```js
 octokit.rest.repos.checkVulnerabilityAlerts({