Get a repository security configuration version

GET/v1/security/repositories/{repositoryId}/versions/{versionId}

How to call this endpoint

Every ACP API request uses bearer authentication. The examples here show the actual request path, auth header, and body shape that the platform expects.

Path, query, and header parameters

These parameters control which ACP object the endpoint acts on and how the request is processed.

Path parameters
NameLocationTypeRequiredDescription
repositoryIdpathstringYesMonitored security repository ID
versionIdpathstringYes
Query parameters
None.
Header parameters
NameLocationTypeRequiredDescription
X-Computer-Agents-OrganizationheaderstringNoActive organization context. If omitted, the authenticated user's personal organization is used.

Body schema

This endpoint does not require a request body.

None.

What the API returns

Each response code below includes the documented payload shape for the ACP API.

200Repository security versionapplication/json
FieldTypeRequiredDescription
versionobjectYes
version.idstringYesUnique identifier.
version.versionintegerYes
version.labelstringYes
version.namestringYesHuman-readable name.
version.descriptionstringYesHuman-readable description.
version.statussaved | publishedYesCurrent lifecycle status.
version.snapshotobjectYesA coherent executable security configuration. Authorization, GitHub identity, monitoring state, findings, and evidence are intentionally not versioned.
version.snapshot.schemaVersion1Yes
version.snapshot.policyobjectYes
version.snapshot.policy.schemaVersion1Yes
version.snapshot.policy.defaultBranchstringYes
version.snapshot.policy.scanModefull | incrementalYes
version.snapshot.policy.scheduleobjectYes
version.snapshot.policy.schedule.enabledbooleanYes
version.snapshot.policy.schedule.cronstringYes
version.snapshot.policy.schedule.timezonestringYes
version.snapshot.policy.pullRequestsobjectYes
version.snapshot.policy.pullRequests.enabledbooleanYes
version.snapshot.policy.pullRequests.branchesstring[]Yes
version.snapshot.policy.pullRequests.pathIncludesstring[]Yes
version.snapshot.policy.pullRequests.pathExcludesstring[]Yes
version.snapshot.policy.pullRequests.scanForksReadOnlytrueYes
version.snapshot.policy.pushobjectYes
version.snapshot.policy.push.enabledbooleanYes
version.snapshot.policy.push.branchesstring[]Yes
version.snapshot.policy.scannersstring[]Yes
version.snapshot.policy.remediationobjectYes
version.snapshot.policy.remediation.modedisabled | approval_requiredYes
version.snapshot.policy.remediation.minimumSeveritycritical | high | medium | low | informationalYes
version.snapshot.policy.remediation.draftPullRequestsOnlytrueYes
version.snapshot.policy.remediation.allowWorkflowChangesfalseYes
version.snapshot.policy.remediation.maximumChangedFilesintegerYes
version.snapshot.policy.remediation.maximumPatchBytesintegerYes
version.snapshot.threatModelobjectYes
version.snapshot.threatModel.schemaVersion1Yes
version.snapshot.threatModel.summarystringYes
version.snapshot.threatModel.entryPointsstring[]Yes
version.snapshot.threatModel.untrustedInputsstring[]Yes
version.snapshot.threatModel.trustBoundariesstring[]Yes
version.snapshot.threatModel.sensitiveDataPathsstring[]Yes
version.snapshot.threatModel.privilegedActionsstring[]Yes
version.snapshot.threatModel.priorityAreasstring[]Yes
version.snapshot.threatModel.exclusionsobject[]Yes
version.snapshot.threatModel.exclusions[].pathstringYesWorkspace-relative file path.
version.snapshot.threatModel.exclusions[].reasonstringYes
version.metadataobjectNoFree-form metadata object.
version.publishedAtstringNo
version.createdAtstringYesISO 8601 timestamp.
version.updatedAtstringYesISO 8601 timestamp.
404Resource not foundapplication/json
FieldTypeRequiredDescription
errorstringNo
Get a repository security configuration version
Loading...
Response 200
Loading...
See the ACP quickstart and SDK flow