{"version":"1.0","generated_at":"2026-10-02T10:02:10.402055","id":3186,"slug":"rate-limits-for-private-vulnerability-reports","title":"私有漏洞报告新增速率限制","summary":"GitHub 在私有漏洞报告功能中加入每日按用户的新报告速率限制，并允许仓库管理员设置仓库级每日报告上限、维护可信报告者白名单，以减少批量与自动化提交对维护者的干扰。","abstract":"私有漏洞报告新增速率限制 GitHub 在私有漏洞报告功能中加入每日按用户的新报告速率限制，并允许仓库管理员设置仓库级每日报告上限、维护可信报告者白名单，以减少批量与自动化提交对维护者的干扰。 GitHub 在私有漏洞报告功能中加入每日按用户的新报告速率限制，并允许仓库管理员设置仓库级每日报告上限、维护可信报告者白名单，以减少批量与自动化提交对维护者的干扰。 原贴提到：Open source maintainers are receiving more low-quality and automated vul 来源：github.blog 开源维护者正在收到越来越多低质量和自动化的漏洞报告，这可能会埋没真正重要的报告。速率限制会限定单个账号一天内可以提交多少份新报告，既包括提交到你的仓库的报告，也包括在整个 GitHub 上的提交。这有助于保护你免受批量提交和自动化提交的干扰，同时合法研究者仍然可以联系到你。 私有漏洞报告现在对新报告按用户应用每日速率限制。达到限制的报告者会看到一条提示，要求他们稍后再试。限制仅适用于新报告。对现有公告的评论不受影响。仓库管理员可以为其仓库设置自定义的每日总报告上限。仓库管理员可以把可信报告者加入允许列表，让他们永远不会被速率限制。 要配置这些设置，请进入你的仓库设置，选择 Advanced Security，然后点击“Private vulnerability reporting”旁边的 Settings。该功能适用于在 GitHub Free、GitHub Pro、GitHub Team 和 GitHub Enterprise Clou…","access_level":"public","access_label":"公开","access_mode":"full","is_preview":false,"canonical_url":"https://opc.beizhux.com/content/3186/rate-limits-for-private-vulnerability-reports","html_url":"https://opc.beizhux.com/content/3186/rate-limits-for-private-vulnerability-reports","json_url":"https://opc.beizhux.com/content/3186/rate-limits-for-private-vulnerability-reports.json","published_at":"2026-10-02T03:57:39","updated_at":"2026-10-02T09:25:43","category":{"slug":"hotspots","name":"全球热点解读"},"source":{"site":"github.blog","author":"Allison","url":"https://github.blog/changelog/2026-10-01-rate-limits-for-private-vulnerability-reports"},"tags":["GitHub","仓库治理","供应链安全","安全运营","开源安全","漏洞报告","私有漏洞报告","速率限制"],"topics":[{"slug":"ai-daily","name":"AI日报","url":"https://opc.beizhux.com/topics/ai-daily","reason":"这篇内容命中「热点解读」等主题信号。"},{"slug":"ai-tools","name":"AI工具","url":"https://opc.beizhux.com/topics/ai-tools","reason":"这篇内容命中「自动化」等主题信号。"},{"slug":"agent-workflow","name":"Agent工作流","url":"https://opc.beizhux.com/topics/agent-workflow","reason":"这篇内容来自该专题长期覆盖的栏目。"}],"keywords":["全球热点解读","AI日报","AI工具","Agent工作流","每日AI日报","AI信号","热点解读","BuilderPulse","工具","自动化","模型","Cursor"],"questions":[{"question":"私有漏洞报告新增速率限制主要讲什么？","answer":"GitHub 在私有漏洞报告功能中加入每日按用户的新报告速率限制，并允许仓库管理员设置仓库级每日报告上限、维护可信报告者白名单，以减少批量与自动化提交对维护者的干扰。"},{"question":"这篇文章最值得关注的要点是什么？","answer":"GitHub 在私有漏洞报告功能中加入每日按用户的新报告速率限制，并允许仓库管理员设置仓库级每日报告上限、维护可信报告者白名单，以减少批量与自动化提交对维护者的干扰。；原贴提到：Open source maintainers are receiving more low-quality and automated vul；来源：github.blog"},{"question":"这篇文章和哪些AI专题相关？","answer":"它适合放在AI日报、AI工具、Agent工作流专题里阅读。 关联原因：这篇内容命中「热点解读」等主题信号。；这篇内容命中「自动化」等主题信号。；这篇内容来自该专题长期覆盖的栏目。"},{"question":"阅读这篇文章建议先理解哪些关键词？","answer":"建议先理解AI日报、每日AI日报、AI信号、热点解读、BuilderPulse这些关键词，再结合正文判断工具、机会或风险是否值得进入自己的工作流。"}],"terms":[{"slug":"ai-daily-term","name":"AI日报","definition":"在AI觉醒星球里，「AI日报」属于「AI日报」方向。持续整理每日AI日报、模型更新、工具变化和行业信号，帮你快速判断哪些信息值得收藏、验证和行动。 每天先看趋势，再决定今天该试什么。","topic_slug":"ai-daily","topic_name":"AI日报","topic_title":"AI日报：每日AI信号、工具动态与行动判断","topic_url":"https://opc.beizhux.com/topics/ai-daily","topic_path":"/topics/ai-daily","url":"https://opc.beizhux.com/glossary/ai-daily-term","path":"/glossary/ai-daily-term","json_url":"https://opc.beizhux.com/glossary/ai-daily-term.json"},{"slug":"daily-ai-briefing","name":"每日AI日报","definition":"在AI觉醒星球里，「每日AI日报」属于「AI日报」方向。持续整理每日AI日报、模型更新、工具变化和行业信号，帮你快速判断哪些信息值得收藏、验证和行动。 每天先看趋势，再决定今天该试什么。","topic_slug":"ai-daily","topic_name":"AI日报","topic_title":"AI日报：每日AI信号、工具动态与行动判断","topic_url":"https://opc.beizhux.com/topics/ai-daily","topic_path":"/topics/ai-daily","url":"https://opc.beizhux.com/glossary/daily-ai-briefing","path":"/glossary/daily-ai-briefing","json_url":"https://opc.beizhux.com/glossary/daily-ai-briefing.json"},{"slug":"ai-signal","name":"AI信号","definition":"在AI觉醒星球里，「AI信号」属于「AI日报」方向。持续整理每日AI日报、模型更新、工具变化和行业信号，帮你快速判断哪些信息值得收藏、验证和行动。 每天先看趋势，再决定今天该试什么。","topic_slug":"ai-daily","topic_name":"AI日报","topic_title":"AI日报：每日AI信号、工具动态与行动判断","topic_url":"https://opc.beizhux.com/topics/ai-daily","topic_path":"/topics/ai-daily","url":"https://opc.beizhux.com/glossary/ai-signal","path":"/glossary/ai-signal","json_url":"https://opc.beizhux.com/glossary/ai-signal.json"},{"slug":"ai-news-analysis","name":"热点解读","definition":"在AI觉醒星球里，「热点解读」属于「AI日报」方向。持续整理每日AI日报、模型更新、工具变化和行业信号，帮你快速判断哪些信息值得收藏、验证和行动。 每天先看趋势，再决定今天该试什么。","topic_slug":"ai-daily","topic_name":"AI日报","topic_title":"AI日报：每日AI信号、工具动态与行动判断","topic_url":"https://opc.beizhux.com/topics/ai-daily","topic_path":"/topics/ai-daily","url":"https://opc.beizhux.com/glossary/ai-news-analysis","path":"/glossary/ai-news-analysis","json_url":"https://opc.beizhux.com/glossary/ai-news-analysis.json"},{"slug":"builderpulse","name":"BuilderPulse","definition":"在AI觉醒星球里，「BuilderPulse」属于「AI日报」方向。持续整理每日AI日报、模型更新、工具变化和行业信号，帮你快速判断哪些信息值得收藏、验证和行动。 每天先看趋势，再决定今天该试什么。","topic_slug":"ai-daily","topic_name":"AI日报","topic_title":"AI日报：每日AI信号、工具动态与行动判断","topic_url":"https://opc.beizhux.com/topics/ai-daily","topic_path":"/topics/ai-daily","url":"https://opc.beizhux.com/glossary/builderpulse","path":"/glossary/builderpulse","json_url":"https://opc.beizhux.com/glossary/builderpulse.json"},{"slug":"ai-tools-term","name":"AI工具","definition":"在AI觉醒星球里，「AI工具」属于「AI工具」方向。围绕AI工具、模型能力、自动化流程和真实使用场景做整理，优先关注能提升效率、降低成本和创造新交付的工具。 不只看工具热度，更看它能不能进入真实流程。","topic_slug":"ai-tools","topic_name":"AI工具","topic_title":"AI工具：模型、插件、自动化与实战场景","topic_url":"https://opc.beizhux.com/topics/ai-tools","topic_path":"/topics/ai-tools","url":"https://opc.beizhux.com/glossary/ai-tools-term","path":"/glossary/ai-tools-term","json_url":"https://opc.beizhux.com/glossary/ai-tools-term.json"},{"slug":"tools","name":"工具","definition":"在AI觉醒星球里，「工具」属于「AI工具」方向。围绕AI工具、模型能力、自动化流程和真实使用场景做整理，优先关注能提升效率、降低成本和创造新交付的工具。 不只看工具热度，更看它能不能进入真实流程。","topic_slug":"ai-tools","topic_name":"AI工具","topic_title":"AI工具：模型、插件、自动化与实战场景","topic_url":"https://opc.beizhux.com/topics/ai-tools","topic_path":"/topics/ai-tools","url":"https://opc.beizhux.com/glossary/tools","path":"/glossary/tools","json_url":"https://opc.beizhux.com/glossary/tools.json"},{"slug":"automation","name":"自动化","definition":"在AI觉醒星球里，「自动化」属于「AI工具」方向。围绕AI工具、模型能力、自动化流程和真实使用场景做整理，优先关注能提升效率、降低成本和创造新交付的工具。 不只看工具热度，更看它能不能进入真实流程。","topic_slug":"ai-tools","topic_name":"AI工具","topic_title":"AI工具：模型、插件、自动化与实战场景","topic_url":"https://opc.beizhux.com/topics/ai-tools","topic_path":"/topics/ai-tools","url":"https://opc.beizhux.com/glossary/automation","path":"/glossary/automation","json_url":"https://opc.beizhux.com/glossary/automation.json"}],"preview_hidden_sections":[],"related_items":[{"id":3195,"title":"【必读】每日AI日报 2026-10-02","url":"https://opc.beizhux.com/content/3195/aihot-daily-2026-10-02","summary":"AIHOT 每日 AI 日报：模型发布/更新： - Microsoft AI 发布 MAI-Transcribe-2-Streaming 及 MAI-Voice-2.1 系列语音模型：Microsoft AI 发布流式转录模型 MAI-Transcribe-2-Streaming，在 Artificial Analy…","access_level":"public"},{"id":3185,"title":"Suno 推出 Speech beta：语音与背景音乐一体生成","url":"https://opc.beizhux.com/content/3185/suno-speech-beta","summary":"Suno 推出 Speech beta，可将语音与原创背景音乐作为一条完整曲目生成；用户输入文字并描述声音和音乐风格即可创作，beta 已向所有用户开放，官方提示口音漂移、停顿过重等问题仍待改进。","access_level":"public"},{"id":3189,"title":"GitHub Actions：macOS 14 runner 镜像将退役","url":"https://opc.beizhux.com/content/3189/github-actions-macos-14-runner-image-retirement","summary":"GitHub 宣布 macOS 14 runner 镜像将于 2026 年 11 月 2 日退役，并安排多个 brownout 时段让相关作业临时失败，以提醒用户迁移。退役前还可能降低 macOS 14 runner 容量，导致继续使用旧标签的作业排队更久；官方要求更新工作流到 macOS arm64 标签。","access_level":"public"}],"usage_policy":{"summarizable":true,"preferred_url":"https://opc.beizhux.com/content/3186/rate-limits-for-private-vulnerability-reports","private_fields_excluded":true}}