---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Field mapping

# Field mapping for the GitHub Application Vulnerability Integration Integrations {#ariaid-title1}

* Release version: Australia
* 
* Updated April 30, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read

Review source and target fields and view imported data on tables and records in your ServiceNow AI Platform instance.

## GitHub Organizations Integration {#avr-github-vuln-mapping__github-organizations-integration}

{#avr-github-vuln-mapping__table_bxf_5pk_cjc__entry__3}

| GitHub source field | ServiceNow AI platform table | ServiceNow target field |
|-|-|-|
| login | sn_vul_discovered_org | name |
| id | sn_vul_discovered_org | org_id |
| description | sn_vul_discovered_org | description |
| url | sn_vul_discovered_org | url |
| repos_url | sn_vul_discovered_org | repos_url |
| enterprise_name (from integration config) | sn_vul_discovered_org | enterprise_name |
[ ]

{#avr-github-vuln-mapping__table_bxf_5pk_cjc}

## GitHub Repositories Integration {#avr-github-vuln-mapping__github-repositories-integration}

{#avr-github-vuln-mapping__table_cxf_5pk_cjc__entry__3}

| GitHub source field | ServiceNow AI platform table | ServiceNow target field |
|-|-|-|
| full_name | sn_vul_app_release | app_name |
| id | sn_vul_app_release | source_app_id |
| private | sn_vul_app_release | description |
| description | sn_vul_app_release | description |
| created_at | sn_vul_app_release | app_creation_date |
| updated_at | sn_vul_app_release | app_updation_date |
| topics | sn_vul_app_release | source_additional_info |
| Custom properties (via GitHub custom properties API) | sn_vul_app_release | source_additional_info |
[ ]

{#avr-github-vuln-mapping__table_cxf_5pk_cjc}

## GitHub Code Scanning Integration {#avr-github-vuln-mapping__github-code-scanning-integration}

{#avr-github-vuln-mapping__table_dxf_5pk_cjc__entry__3}

| GitHub source field | ServiceNow AI platform table | ServiceNow target field |
|-|-|-|
| repository.full_name | sn_vul_app_release | app_name |
| repository.id | sn_vul_app_release | source_app_id |
| repository.private | sn_vul_app_release | description |
| repository.description | sn_vul_app_release | description |
[Table 1. Code Scanning Integration field mappings for Discovered Applications]

{#avr-github-vuln-mapping__table_dxf_5pk_cjc} {#avr-github-vuln-mapping__table_exf_5pk_cjc__entry__3}

| GitHub source field | ServiceNow AI platform table | ServiceNow target field |
|-|-|-|
| rule.id | sn_vul_app_vul_entry | source_entry_id |
| rule.description | sn_vul_app_vul_entry | threat |
| rule.security_severity_level | sn_vul_app_vul_entry | normalized_severity |
| rule.security_severity_level | sn_vul_app_vul_entry | source_severity |
| rule.tags (CWE entries only) | sn_vul_app_vul_entry | cwe_list |
[Table 2. Code Scanning Integration field mappings for Application Vulnerability Entry]

{#avr-github-vuln-mapping__table_exf_5pk_cjc} {#avr-github-vuln-mapping__table_fxf_5pk_cjc__entry__3}

| GitHub source field | ServiceNow AI platform table | ServiceNow target field |
|-|-|-|
| repository.id | sn_vul_app_vulnerable_item | source_app_id |
| repository.full_name | sn_vul_app_vulnerable_item | app_name |
| number | sn_vul_app_vulnerable_item | source_avit_id |
| rule.id | sn_vul_app_vulnerable_item | source_entry_id |
| rule.security_severity_level | sn_vul_app_vulnerable_item | source_severity |
| html_url | sn_vul_app_vulnerable_item | source_link |
| state | sn_vul_app_vulnerable_item | computed_status |
| state | sn_vul_app_vulnerable_item | source_finding_status |
| most_recent_instance.message.text | sn_vul_app_vulnerable_item | description |
| most_recent_instance.location.path | sn_vul_app_vulnerable_item | location |
| most_recent_instance.location.start_line | sn_vul_app_vulnerable_item | line_number |
| most_recent_instance.analysis_key | sn_vul_app_vulnerable_item | source_additional_info |
| most_recent_instance.environment | sn_vul_app_vulnerable_item | source_additional_info |
| most_recent_instance.commit_sha | sn_vul_app_vulnerable_item | source_additional_info |
| most_recent_instance.classifications | sn_vul_app_vulnerable_item | source_additional_info |
| updated_at | sn_vul_app_vulnerable_item | last_scan_date |
| updated_at | sn_vul_app_vulnerable_item | last_found |
| created_at | sn_vul_app_vulnerable_item | first_found |
[Table 3. Code Scanning Integration field mappings for Application Vulnerable Item]

{#avr-github-vuln-mapping__table_fxf_5pk_cjc}

## GitHub Dependabot Integration {#avr-github-vuln-mapping__github-dependabot-integration}

{#avr-github-vuln-mapping__table_gxf_5pk_cjc__entry__3}

| GitHub source field | ServiceNow AI platform table | ServiceNow target field |
|-|-|-|
| repository.full_name | sn_vul_app_release | app_name |
| repository.id | sn_vul_app_release | source_app_id |
| repository.private | sn_vul_app_release | description |
| repository.description | sn_vul_app_release | description |
[Table 4. GitHub Dependabot Integration field mappings for Discovered Applications]

{#avr-github-vuln-mapping__table_gxf_5pk_cjc} {#avr-github-vuln-mapping__table_hxf_5pk_cjc__entry__3}

| GitHub source field | ServiceNow AI platform table | ServiceNow target field |
|-|-|-|
| dependency.package.ecosystem + dependency.package.name | sn_vul_app_package | package_unique_id |
| dependency.package.name | sn_vul_app_package | package_name |
| dependency.manifest_path | sn_vul_app_package | paths |
| security_vulnerability.first_patched_version.identifier | sn_vul_app_package | fixed_package_version |
[Table 5. GitHub Dependabot Integration field mappings for Package]

{#avr-github-vuln-mapping__table_hxf_5pk_cjc} {#avr-github-vuln-mapping__table_ixf_5pk_cjc__entry__3}

| GitHub source field | ServiceNow AI platform table | ServiceNow target field |
|-|-|-|
| security_advisory.ghsa_id | sn_vul_app_vul_entry | source_entry_id |
| security_advisory.summary | sn_vul_app_vul_entry | threat |
| security_advisory.severity | sn_vul_app_vul_entry | source_severity |
| security_advisory.cwes\[\].cwe_id + name | sn_vul_app_vul_entry | cwe_list |
[Table 6. GitHub Dependabot Integration field mappings for Application Vulnerability Entry]

{#avr-github-vuln-mapping__table_ixf_5pk_cjc} {#avr-github-vuln-mapping__table_jxf_5pk_cjc__entry__3}

| GitHub source field | ServiceNow AI platform table | ServiceNow target field |
|-|-|-|
| repository.id | sn_vul_app_vulnerable_item | source_app_id |
| repository.full_name | sn_vul_app_vulnerable_item | app_name |
| number | sn_vul_app_vulnerable_item | source_avit_id |
| security_advisory.cve_id *(or ghsa_id if no CVE)* | sn_vul_app_vulnerable_item | source_entry_id |
| security_advisory.severity | sn_vul_app_vulnerable_item | source_severity |
| html_url | sn_vul_app_vulnerable_item | source_link |
| state | sn_vul_app_vulnerable_item | computed_status |
| state | sn_vul_app_vulnerable_item | source_finding_status |
| dependency.scope | sn_vul_app_vulnerable_item | source_additional_info |
| dependency.manifest_path | sn_vul_app_vulnerable_item | source_additional_info |
| auto_dismissed_at | sn_vul_app_vulnerable_item | source_additional_info |
| updated_at | sn_vul_app_vulnerable_item | last_scan_date |
| updated_at | sn_vul_app_vulnerable_item | last_found |
| created_at | sn_vul_app_vulnerable_item | first_found |
[Table 7. GitHub Dependabot Integration field mappings for Application Vulnerable Item]

{#avr-github-vuln-mapping__table_jxf_5pk_cjc}

## GitHub Secret Scanning Integration {#avr-github-vuln-mapping__github-secret-scanning-integration}

{#avr-github-vuln-mapping__table_kxf_5pk_cjc__entry__3}

| GitHub source field | ServiceNow AI platform table | ServiceNow target field |
|-|-|-|
| repository.full_name | sn_vul_app_release | app_name |
| repository.id | sn_vul_app_release | source_app_id |
| repository.private | sn_vul_app_release | description |
| repository.description | sn_vul_app_release | description |
[Table 8. GitHub Secret Scanning Integration for Discovered Applications]

{#avr-github-vuln-mapping__table_kxf_5pk_cjc} {#avr-github-vuln-mapping__table_lxf_5pk_cjc__entry__3}

| GitHub source field | ServiceNow AI platform table | ServiceNow target field |
|-|-|-|
| secret_type *(or token_type for generic secrets)* | sn_vul_app_vul_entry | source_entry_id |
| secret_type_display_name (or token_type for generic secrets) | sn_vul_app_vul_entry | threat |
[Table 9. GitHub Secret Scanning Integration for Application Vulnerability Entry]

{#avr-github-vuln-mapping__table_lxf_5pk_cjc} {#avr-github-vuln-mapping__table_mxf_5pk_cjc__entry__3}

| GitHub source field | ServiceNow AI platform table | ServiceNow target field |
|-|-|-|
| repository.id | sn_vul_app_vulnerable_item | source_app_id |
| repository.full_name | sn_vul_app_vulnerable_item | app_name |
| number | sn_vul_app_vulnerable_item | source_avit_id |
| secret_type *(or token_type for generic secrets)* | sn_vul_app_vulnerable_item | source_entry_id |
| secret_type / token_type (derived) | sn_vul_app_vulnerable_item | scan_type |
| html_url | sn_vul_app_vulnerable_item | source_link |
| state | sn_vul_app_vulnerable_item | computed_status |
| state | sn_vul_app_vulnerable_item | source_finding_status |
| push_protection_bypassed | sn_vul_app_vulnerable_item | source_additional_info |
| validity | sn_vul_app_vulnerable_item | source_additional_info |
| updated_at | sn_vul_app_vulnerable_item | last_scan_date |
| updated_at | sn_vul_app_vulnerable_item | last_found |
| created_at | sn_vul_app_vulnerable_item | first_found |
[Table 10. GitHub Secret Scanning Integration for Application Vulnerable Item]

{#avr-github-vuln-mapping__table_mxf_5pk_cjc}

## GitHub Secret Scanning Locations {#avr-github-vuln-mapping__github-secret-scanning-locations}

{#avr-github-vuln-mapping__table_nxf_5pk_cjc__entry__3}

| GitHub source field | ServiceNow AI platform table | ServiceNow target field |
|-|-|-|
| locations\[commit\].details.path | sn_vul_app_vulnerable_item | location |
| locations\[commit\].details.start_line | sn_vul_app_vulnerable_item | line_number |
[Table 11. Secret Scanning Locations]

{#avr-github-vuln-mapping__table_nxf_5pk_cjc}

## State and severity Mappings {#avr-github-vuln-mapping__state-mappings}

Applies to all alert integrations: Code Scanning, Dependabot, and Secret Scanning.  
Note:  
All Secret Scanning findings are automatically assigned a normalized severity of 5 (Critical), regardless of their GitHub-reported severity. This is because, under Application Vulnerability Response conventions, any exposed secret is by default treated as a critical risk.
{#avr-github-vuln-mapping__table_oxf_5pk_cjc__entry__3}

| Source State | Target State | Target Reason |
|-|-|-|
| open | Open |   |
| used_in_tests | Open |   |
| dismissed | Closed | False Positive |
| auto_dismissed | Closed | False Positive |
| false_positive | Closed | False Positive |
| fixed | Closed | Fixed |
| revoked | Closed | Fixed |
| wont_fix | Deferred | Risk Accepted |
[Table 12. State mappings]

{#avr-github-vuln-mapping__table_oxf_5pk_cjc} {#avr-github-vuln-mapping__table_x5z_clk_cjc__entry__2}

| Source value | Target value |
|-|-|
| Critical | 5 |
| High | 4 |
| Medium | 3 |
| Low | 2 |
| Info/Unset | 1 |
[Table 13. Severity mappings]

{#avr-github-vuln-mapping__table_x5z_clk_cjc}