Check if pull request is associated with vulnarabilityAlert

[sebastiankoltun]

Select Topic Area

GraphQL query for vulnerability alert pull requests

Question:
Are there other ways around to check if pull request is associated with vulnerability alert?

Body

I need to find out if dependabot created pull request is associated with vulnerability alert.

I found one solution using GraphQL query:

query VulnerabilityAlertsPullRequests($repo_owner: String!, $repo_name: String!) {
    organization(login: $repo_owner){
        repository(name: $repo_name){
            vulnerabilityAlerts(first: 100){
                nodes {
                    dependabotUpdate {
                        pullRequest {
                            number
                        }
                    }
                }
                pageInfo {
                    ...pageInfo
                }
            }
        }
    }
}

But the problem is that this query return paginated results with bunch of nulls and there is no way to filter out such results using query filters.

{
  "data": {
    "organization": {
      "repository": {
        "vulnerabilityAlerts": {
          "nodes": [
            {
              "dependabotUpdate": null
            },
            {
              "dependabotUpdate": null
            },
            {
              "dependabotUpdate": null
            },
            {
              "dependabotUpdate": null
            },
           [...]