Skip to main content

Advisory state conflict

typehttps://docs.frem.sh/reference/api/errors/advisory-state-conflict
HTTP status409 Conflict

What it means

The change is not possible in the advisory’s current state: a closed or withdrawn advisory cannot be edited, a published one keeps its repository and is withdrawn rather than deleted, and each state change has a state it starts from.

Example detail messages returned with this error:

  • cannot publish a closed advisory.
  • a published advisory is withdrawn, not deleted: scanners must learn it no longer applies.
  • A published advisory stays about the repository it was published for.

What to do

Read the advisory again (GET /orgs/{org}/security-advisories/{id}) and act on its state: reopen a closed draft before editing it, withdraw a published advisory instead of deleting it.

Response shape

All fremforge API errors are RFC 9457 problem+json:

{
  "type": "https://docs.frem.sh/reference/api/errors/advisory-state-conflict",
  "title": "Conflict",
  "status": 409,
  "detail": "..."
}

Branch on type, not on title or detail - those are human-readable and may be reworded.