---
title: "List codegen rulesets"
method: GET
path: "/api/v2/static-analysis/codegen/rulesets"
tags: ["Security Monitoring"]
---

# List codegen rulesets

`GET /api/v2/static-analysis/codegen/rulesets`

Get the rulesets relevant for code generation for the authenticated user.

## Response `200`

OK

- SastRulesetsResponse — The response payload containing a list of SAST rulesets and their rules.
  - `data` SastRulesetData[], required — The list of SAST rulesets returned in the response.
    - `attributes` SastRulesetDataAttributes, required — The attributes of a SAST ruleset, including its name, description, and rules.
      - `description` string, required — A detailed description of the ruleset's purpose and the types of issues it targets.
      - `name` string, required — The unique name of the ruleset.
      - `rules` GetMultipleRulesetsResponseDataAttributesRulesetsItemsRulesItems[], required — The list of static analysis rules included in this ruleset.
        - `arguments` GetMultipleRulesetsResponseDataAttributesRulesetsItemsRulesItemsArgumentsItems[] — The list of configurable arguments accepted by this rule.
          - `description` string — A human-readable explanation of the argument's purpose and accepted values.
          - `name` string — The name of the rule argument.
        - `category` string — The category classifying the type of issue this rule detects (e.g., security, style, performance).
        - `checksum` string — A checksum of the rule definition used to detect changes.
        - `code` string — The rule implementation code used by the static analysis engine.
        - `created_at` string, date-time — The date and time when the rule was created.
        - `created_by` string — The identifier of the user or system that created the rule.
        - `cve` string — The CVE identifier associated with the vulnerability this rule detects, if applicable.
        - `cwe` string — The CWE identifier associated with the weakness category this rule detects, if applicable.
        - `data` GetMultipleRulesetsResponseDataAttributesRulesetsItemsRulesItemsData, required — The resource identifier and type for a static analysis rule.
          - `id` string — The unique identifier of the rule resource.
          - `type` 'rules', required — Rules resource type.
        - `description` string — A detailed explanation of what the rule detects and why it matters.
        - `documentation_url` string — A URL pointing to additional documentation for this rule.
        - `entity_checked` string — The code entity type (e.g., function, class, variable) that this rule inspects.
        - `is_published` boolean — Indicates whether the rule is publicly published and available to all users.
        - `is_testing` boolean — Indicates whether the rule is in testing mode and not yet promoted to production.
        - `language` string — The programming language this rule applies to.
        - `last_updated_at` string, date-time — The date and time when the rule was last modified.
        - `last_updated_by` string — The identifier of the user or system that last updated the rule.
        - `name` string — The unique name identifying this rule within its ruleset.
        - `regex` string — A regular expression pattern used by the rule for pattern-based detection.
        - `severity` string — The severity level of findings produced by this rule (e.g., ERROR, WARNING, NOTICE).
        - `short_description` string — A brief summary of what the rule detects, suitable for display in listings.
        - `should_use_ai_fix` boolean — Indicates whether an AI-generated fix suggestion should be offered for findings from this rule.
        - `tests` GetMultipleRulesetsResponseDataAttributesRulesetsItemsRulesItemsTestsItems[] — The list of test cases used to validate the rule's behavior.
          - `annotation_count` integer — The expected number of annotations (findings) the rule should produce when run against the test code.
          - `code` string — The source code snippet used as input for the rule test.
          - `filename` string — The filename associated with the test code snippet.
        - `tree_sitter_query` string — The Tree-sitter query expression used by the rule to match code patterns in the AST.
        - `type` string — The rule type indicating the detection mechanism used (e.g., tree_sitter, regex).
      - `short_description` string, required — A brief summary of the ruleset, suitable for display in listings.
    - `id` string, required — The unique identifier of the ruleset resource.
    - `type` 'rulesets', required — Rulesets resource type.

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `429` — Too many requests

---

[API](https://skmtc.net/datadog/apis/api-v2.md) · [All operations](https://skmtc.net/datadog/apis/api-v2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/datadog/api-v2/versions/da68bf029e4c/schema)