Get the repository security overview

GET/v1/security/overview

Returns organization-scoped repository, finding, and run aggregates. Requires security:read.

How to call this endpoint

Every ACP API request uses bearer authentication. The examples here show the actual request path, auth header, and body shape that the platform expects.

Path, query, and header parameters

These parameters control which ACP object the endpoint acts on and how the request is processed.

Path parameters
None.
Query parameters
None.
Header parameters
NameLocationTypeRequiredDescription
X-Computer-Agents-OrganizationheaderstringNoActive organization context. If omitted, the authenticated user's personal organization is used.

Body schema

This endpoint does not require a request body.

None.

What the API returns

Each response code below includes the documented payload shape for the ACP API.

200Security overviewapplication/json
FieldTypeRequiredDescription
metricsobjectYes—
metrics.repositoriesintegerYes—
metrics.activeRepositoriesintegerYes—
metrics.openFindingsintegerYes—
metrics.criticalFindingsintegerYes—
metrics.highFindingsintegerYes—
metrics.fixedFindingsintegerYes—
metrics.totalRunsintegerYes—
metrics.successfulRunsintegerYes—
metrics.failedRunsintegerYes—
metrics.activeRunsintegerYes—
repositoriesobject[]Yes—
repositories[].ownershipInvitationobjectNo—
repositories[].ownershipInvitation.idstringYesUnique identifier.
repositories[].ownershipInvitation.organizationIdstringYes—
repositories[].ownershipInvitation.kindshare | ownershipYes—
repositories[].ownershipInvitation.resourceTypestringYes—
repositories[].ownershipInvitation.resourceIdstringYes—
repositories[].ownershipInvitation.resourceNamestringYes—
repositories[].ownershipInvitation.recipientUserIdstringYes—
repositories[].ownershipInvitation.invitedByUserIdstringYes—
repositories[].ownershipInvitation.accessLeveluse | edit | manageYes—
repositories[].ownershipInvitation.statuspending | accepted | declined | revoked | expiredYesCurrent lifecycle status.
repositories[].ownershipInvitation.expiresAtstringYes—
repositories[].ownershipInvitation.decidedAtstringYes—
repositories[].ownershipInvitation.createdAtstringYesISO 8601 timestamp.
repositories[].ownershipInvitation.updatedAtstringYesISO 8601 timestamp.
repositories[].idstringYesUnique identifier.
repositories[].githubRepositoryIdstringYes—
repositories[].githubInstallationIdstringYes—
repositories[].githubNumericRepositoryIdstringNo—
repositories[].githubNumericInstallationIdstringNo—
repositories[].fullNamestringYes—
repositories[].defaultBranchstringYes—
repositories[].privatebooleanYes—
repositories[].archivedbooleanYes—
repositories[].statusactive | paused | disconnectedYesCurrent lifecycle status.
repositories[].currentPolicyVersionIdstringNo—
repositories[].currentThreatModelVersionIdstringNo—
repositories[].permissionSetobjectNo—
repositories[].lastRunIdstringNo—
repositories[].lastRunAtstringNo—
repositories[].nextScanAtstringNo—
repositories[].metadataobjectNoFree-form metadata object.
repositories[].findingCountsobjectYes—
repositories[].findingCounts.openintegerYes—
repositories[].findingCounts.criticalintegerYes—
repositories[].findingCounts.highintegerYes—
repositories[].lastRunStatusqueued | running | waiting_approval | succeeded | partial | failed | cancelledNo—
repositories[].lastRunStageingest | checkout | inventory | scan | validate | triage | remediate | verify | publish | completeNo—
repositories[].createdAtstringYesISO 8601 timestamp.
repositories[].updatedAtstringYesISO 8601 timestamp.
Get the repository security overview
Loading...
Response 200
Loading...
See the ACP quickstart and SDK flow