Advisory incomplete

What it means

The advisory cannot be published yet: it needs a severity and at least one affected package.

Example detail messages returned with this error:

• set severity and affected before publishing.

What to do

Add the missing parts with PUT /orgs/{org}/security-advisories/{id} and publish again.

Response shape

All fremforge API errors are RFC 9457 problem+json:

{
  "type": "https://docs.frem.sh/reference/api/errors/advisory-incomplete",
  "title": "Unprocessable Content",
  "status": 422,
  "detail": "..."
}

Branch on type, not on title or detail - those are human-readable and may be reworded.