diff --git a/project_composer.module b/project_composer.module
index 09d4f5ae66ed1ffffdd6a2fb250335a2bce3c5e1..c1e9b518a7bb2230d712c89315129ddd30c6aa30 100644
--- a/project_composer.module
+++ b/project_composer.module
@@ -349,7 +349,7 @@ function project_composer_root_metadata_data($release_category) {
   if ($release_category === 'current') {
     $metadata['security-advisories'] = [
       'metadata' => TRUE,
-      'api-url' => NULL,
+      'api-url' => url(variable_get('project_composer_packages_url', 'https://packages.drupal.org') . '/' . project_composer_core_version_string_from_release_category($release_category) . '/security-advisories', ['absolute' => TRUE]),
       'query-all' => TRUE,
     ];
   }