# GitHub Security Advisory Feed – RubyGems/Ruby

> GitHub Security Advisory Feed – RubyGems/Ruby is a paid API for AI agents from oracles-production.up.railway.app, paid per call via x402, $0.05/call, status unknown (last checked 2026-09-15).

Returns GitHub security advisories (GHSAs) for RubyGems/Ruby packages published since a given timestamp, scored by severity with affected package details and source links.

## Facts

- Endpoint: GET https://oracles-production.up.railway.app/v1/ghsa-rubygems/changes
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/github-security-advisory-feed-rubygems-ruby-f64676b6
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_Eh0Zw0tidOkFyETC8heXa

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability github-security-advisory-feed-rubygems-ruby-f64676b6
```

Example prompt: Pull all new GitHub security advisories for RubyGems published since 2025-01-01T00:00:00Z, limit to 50 results, and only show ones scored at least 7 out of 10 severity.

## When to prefer this

Use this endpoint when you need to monitor or audit security vulnerabilities specifically in the RubyGems/Ruby package ecosystem using GitHub's advisory database, with the ability to filter by recency and severity. Prefer it over generic vulnerability feeds when you need structured, scored GHSA data with direct source links for Ruby dependencies.

## Known failure modes

- Invalid or missing 'since' parameter format returns a 400 bad request
- min_significance outside 1–10 range returns a validation error
- limit exceeding 500 returns a validation error
- Payment not provided or failed results in a 402 Payment Required response
- No advisories in the requested window returns count: 0 with an empty changes array
- Upstream GitHub Advisory Database unavailable causes a 502 or 503 error

## How this service works

New security vulnerabilities and CVEs affecting RubyGems/Ruby packages published since a timestamp (GitHub's reviewed advisory database) — each with its CVE ID, CVSS/severity score, affected package names, and a link. Answers "did a dependency I use get a new CVE or vulnerability I should patch?"

## Output

A JSON object containing a count of matching advisories, the source identifier, and an array of advisory change objects — each with a GHSA entity ID, title, summary, significance score (1–10), detected timestamp, effective date, type, detail object, and a primary-source URL linking to the advisory on GitHub.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {
      "limit": {
       "type": "integer",
       "maximum": 500,
       "minimum": 1
      },
      "since": {
       "type": "string",
       "format": "date-time",
       "description": "Only changes detected after this ISO-8601 instant"
      },
      "min_significance": {
       "type": "integer",
       "maximum": 10,
       "minimum": 1,
       "description": "Keep only changes scored at least this"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object",
     "properties": {
      "count": {
       "type": "integer"
      },
      "source": {
       "type": "string"
      },
      "changes": {
       "type": "array",
       "items": {
        "type": "object",
        "properties": {
         "type": {
          "type": "string"
         },
         "title": {
          "type": "string"
         },
         "detail": {
          "type": "object"
         },
         "summary": {
          "type": "string"
         },
         "entityId": {
          "type": "string"
         },
         "sourceUrl": {
          "type": [
           "string",
           "null"
          ],
          "description": "Primary-source link for verification"
         },
         "detectedAt": {
          "type": "string",
          "format": "date-time"
         },
         "significance": {
          "type": "integer",
          "maximum": 10,
          "minimum": 1
         },
         "effectiveDate": {
          "type": [
           "string",
           "null"
          ]
         }
        }
       }
      }
     }
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/github-security-advisory-feed-rubygems-ruby-f64676b6/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from oracles-production.up.railway.app](https://www.zero.xyz/host/oracles-production.up.railway.app/llms.txt)