--- title: "GetLinterResult" method: GET path: "/v1/namespaces/{tenant_meta.namespace}/linter-results/{uuid}" tags: ["LinterResultService"] --- # GetLinterResult `GET /v1/namespaces/{tenant_meta.namespace}/linter-results/{uuid}` Fetches the linter result identified by the UUID. ## Path parameters - `tenant_meta.namespace` string, required - `uuid` string, required ## Query parameters - `get_parameters.mask` string ## Response `200` A successful response. - V1LinterResult — The meta parent_kind can take one of two values - PackageVersion or RepositoryVersion. - `context` V1Context, required — Contexts keep objects from different scans separated. - `id` string, required — The context ID, such as a pull request ID or branch reference. - `tags` string[] — A list of tags applied to a context. Used primarily for CI and SBOM contexts. - `type` 'CONTEXT_TYPE_UNSPECIFIED' | 'CONTEXT_TYPE_MAIN' | 'CONTEXT_TYPE_EXTERNAL' | 'CONTEXT_TYPE_CI_RUN' | 'CONTEXT_TYPE_SBOM' | 'CONTEXT_TYPE_REF', required — - CONTEXT_TYPE_MAIN: Objects from a scan of the default branch. All objects in the oss namespace are in the main context. The context id is always "default". - CONTEXT_TYPE_EXTERNAL: Indicates that this object is a copy/temporary value of an object in another project. Used for same-tenant dependencies. In source code reference this is equivalent to "vendor" folders. Package versions in the external context are only scanned for call graphs. No other operations are performed on them. - CONTEXT_TYPE_CI_RUN: Objects from a PR scan. The context id is the PR UUID. Objects in this context are deleted after 30 days. - CONTEXT_TYPE_SBOM: Objects from an SBOM scan. The context id is the SBOM serial number or some other unique identifier. - CONTEXT_TYPE_REF: Objects from a scan of a specific branch. The context id is the branch reference name. - `will_be_deleted_at` string, date-time — Time that all objects in this context will be deleted. This field is deprecated and will be removed in the future. Please use the meta.will_be_deleted_at field instead. - `meta` V1Meta, required — Common fields for all Endor Labs resources. - `annotations` object — Annotations can be used to attach metadata to a resource message. Annotation values can be small or large, structured or unstructured, and may include characters not permitted by labels. The keys may contain alphanumerics, underscores (_), dots (.) and dashes (-). The values of an annotation must be 16384 bytes or smaller. - `create_time` string, date-time — Time the resource was created. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt. - `created_by` string — Name and authentication source of the user who created the object, for example, ewok@endor.ai@google@api-key. - `description` string — Resource description. Must be less than 1024 bytes. - `index_data` V1IndexData — IndexData is used to index the resource for search. It's an internal object. - `data` string[] - `search_score` number, float — search_score is the score of the resource for search. Internal use only. - `tenant` string - `will_be_deleted_at` string, date-time — Time that the resource will be deleted. - `kind` string — Resource kind, for example, HelloResponse. Auto-generated using the protobuf message proto.MessageName().Name(). - `name` string, required — Resource name. Must be 63 characters or less. - `parent_kind` string — Parent object resource kind, for example, Project. - `parent_uuid` string — Parent object UUID. - `references` object — Map of objects referenced in a query API. - `tags` string[] — List of tags attached to the resource. Tags can be used to select objects and to find collections of objects that satisfy certain conditions. A tag must be 255 characters or less. - `update_time` string, date-time — Time the resource was last updated. Note: Updated on all create/patch/delete operations. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt. - `updated_by` string — Name and authentication source of the last user who updated the object, for example, vulnerabilityingestor@endor.ai@x509. - `upsert_time` string, date-time — Time the resource was last upserted. Note: create_time is only set the first time the resource is created. upsert_time is set every time the resource is upseted. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt. - `version` string — Message version. - `spec` V1LinterResultSpec, required - `ai_result` V1AIResult — AI result. - `explanation` string, required — Human-readable description of the result. - `level` 'AI_LEVEL_UNSPECIFIED' | 'AI_LEVEL_CRITICAL' | 'AI_LEVEL_HIGH' | 'AI_LEVEL_MEDIUM' | 'AI_LEVEL_LOW', required — AI severity level. - AI_LEVEL_CRITICAL: Critical AI SAST. - AI_LEVEL_HIGH: High AI SAST. - AI_LEVEL_MEDIUM: Medium AI SAST. - AI_LEVEL_LOW: Low AI SAST. - `sast` AIResultSAST - `attack_vector` string — Attack vector breakdown table when no exploit reproduction is emitted (the "## Attack Vector" section). - `classification` 'FINDING_CLASSIFICATION_UNSPECIFIED' | 'FINDING_CLASSIFICATION_SECURITY_VULNERABILITY' | 'FINDING_CLASSIFICATION_LOGICAL_BUG' — Classification of the finding type. Extensible for future categories. - FINDING_CLASSIFICATION_SECURITY_VULNERABILITY: Security vulnerability (e.g. SQL injection, XSS, hardcoded creds). - FINDING_CLASSIFICATION_LOGICAL_BUG: Logical bug (e.g. null pointer, resource leak, race condition). - `cwes` string[] — The CWEs of the vulnerability. - `dataflow` V1SourceLocation[] — Deprecated: use call_stack instead. One or more source locations representing the data flow path from a source to a sink. The locations are ordered and include the source, any intermediate nodes, and the sink. If only a single location is provided, it represents the sink location only. - `description` string — Human-readable description of what happens at this dataflow step. - `end_column` integer - `end_line` integer - `function_name` string — The name of the function for this location if available. - `relative_path` string — The relative path to the file where the issue was found. - `scm_link` string — Permalink to this location in the SCM (GitHub/GitLab/Azure/Bitbucket). Displayed in the UI. - `snippet` string — Code snippet containing the issue. - `start_column` integer - `start_line` integer - `type` 'LOCATION_TYPE_UNSPECIFIED' | 'LOCATION_TYPE_SOURCE' | 'LOCATION_TYPE_SINK' | 'LOCATION_TYPE_INTERMEDIATE' | 'LOCATION_TYPE_LOGICAL_BUG' — Classification of the location type within a data flow path. - LOCATION_TYPE_SOURCE: The source location. - LOCATION_TYPE_SINK: The sink location. - LOCATION_TYPE_INTERMEDIATE: The intermediate location. - LOCATION_TYPE_LOGICAL_BUG: The logical bug location. - `exploit_reproduction` string — Step-by-step exploit reproduction for high/critical true positives (the "## Exploit Reproduction" section). - `language` string — Programming language of the file where this result was found. - `location` V1SourceLocation - `description` string — Human-readable description of what happens at this dataflow step. - `end_column` integer - `end_line` integer - `function_name` string — The name of the function for this location if available. - `relative_path` string — The relative path to the file where the issue was found. - `scm_link` string — Permalink to this location in the SCM (GitHub/GitLab/Azure/Bitbucket). Displayed in the UI. - `snippet` string — Code snippet containing the issue. - `start_column` integer - `start_line` integer - `type` 'LOCATION_TYPE_UNSPECIFIED' | 'LOCATION_TYPE_SOURCE' | 'LOCATION_TYPE_SINK' | 'LOCATION_TYPE_INTERMEDIATE' | 'LOCATION_TYPE_LOGICAL_BUG' — Classification of the location type within a data flow path. - LOCATION_TYPE_SOURCE: The source location. - LOCATION_TYPE_SINK: The sink location. - LOCATION_TYPE_INTERMEDIATE: The intermediate location. - LOCATION_TYPE_LOGICAL_BUG: The logical bug location. - `remediation` string — Recommended remediation, including any unified-diff fix (the "## Remediation Guidance" section). - `security_controls` string — Security controls assessment table (the "## Security Controls" section). - `severity_scoring` string — Severity scoring breakdown (the "## Severity Scoring" section). - `summary` string — Short prose summary of the vulnerability (the "## Summary" section). - `validation_outcome` string — Validation outcome for unknown findings (the "## Validation Outcome" section). - `verification_scorecard` string — Verification scorecard with per-criterion verdicts (the "## Verification Scorecard" section). - `title` string, required — Human-readable title of the result. - `aisast` V1AISastSummary — AI SAST summary. - `call_stack` V1LocationWithName[], required — The path (call stack) of the vulnerable code. - `location` V1SarifLocation, required - `annotations` V1SarifRegion[] - `end_column` integer - `end_line` integer - `snippet` V1SarifText - … - `start_column` integer - `start_line` integer - `id` integer — A unique identifier for this location object. - `logical_locations` V1SarifLogicalLocation[] — The logical locations associated with a physical location. - `decorated_name` string — The name of the decorated logical location. - `fully_qualified_name` string — The fully qualified name of the logical location. - `index` integer — The 0-based index of this logical location in an array of logical locations. - `kind` string — The kind of logical location. - `name` string — The name of the logical location. - `parent_index` integer — The name of the parent of this logical location. - `properties` object — Key/value pairs that provide additional information. - `message` V1SarifText - `markdown` string — Markdown representation of the content. - `text` string - `physical_location` SarifLocationPhysicalLocation - `artifact_location` V1SarifArtifactLocation - … - `properties` object — Key-value pairs that provide additional information. - `region` V1SarifRegion - … - `relationships` V1SarifRelationship[] — An array of relationships between this location and other locations. - `description` V1SarifText - … - `kinds` string[] — A set of strings that describe the relationship. - `properties` object — Key/value pairs that provide additional information about the relationship. - `target` integer — The id of the location that is the target of the relationship. - `name` string, required — The (preferably) unique name of the code location. Could be a function ref or a module name. - `type` string — The type of the code location. - `cwe` string, required — The CWE of the vulnerability. - `explanation` string, required — Free-form explanation of the vulnerability. - `sanitizer_callsites` V1LocationWithName[] — This are the locations of the callsites that are used to mitigate the vulnerability. - `location` V1SarifLocation, required - `annotations` V1SarifRegion[] - `end_column` integer - `end_line` integer - `snippet` V1SarifText - … - `start_column` integer - `start_line` integer - `id` integer — A unique identifier for this location object. - `logical_locations` V1SarifLogicalLocation[] — The logical locations associated with a physical location. - `decorated_name` string — The name of the decorated logical location. - `fully_qualified_name` string — The fully qualified name of the logical location. - `index` integer — The 0-based index of this logical location in an array of logical locations. - `kind` string — The kind of logical location. - `name` string — The name of the logical location. - `parent_index` integer — The name of the parent of this logical location. - `properties` object — Key/value pairs that provide additional information. - `message` V1SarifText - `markdown` string — Markdown representation of the content. - `text` string - `physical_location` SarifLocationPhysicalLocation - `artifact_location` V1SarifArtifactLocation - … - `properties` object — Key-value pairs that provide additional information. - `region` V1SarifRegion - … - `relationships` V1SarifRelationship[] — An array of relationships between this location and other locations. - `description` V1SarifText - … - `kinds` string[] — A set of strings that describe the relationship. - `properties` object — Key/value pairs that provide additional information about the relationship. - `target` integer — The id of the location that is the target of the relationship. - `name` string, required — The (preferably) unique name of the code location. Could be a function ref or a module name. - `type` string — The type of the code location. - `sanitizer_definitions` V1LocationWithName[] — The sanitizer definitions locations that are used to mitigate the vulnerability. - `location` V1SarifLocation, required - `annotations` V1SarifRegion[] - `end_column` integer - `end_line` integer - `snippet` V1SarifText - … - `start_column` integer - `start_line` integer - `id` integer — A unique identifier for this location object. - `logical_locations` V1SarifLogicalLocation[] — The logical locations associated with a physical location. - `decorated_name` string — The name of the decorated logical location. - `fully_qualified_name` string — The fully qualified name of the logical location. - `index` integer — The 0-based index of this logical location in an array of logical locations. - `kind` string — The kind of logical location. - `name` string — The name of the logical location. - `parent_index` integer — The name of the parent of this logical location. - `properties` object — Key/value pairs that provide additional information. - `message` V1SarifText - `markdown` string — Markdown representation of the content. - `text` string - `physical_location` SarifLocationPhysicalLocation - `artifact_location` V1SarifArtifactLocation - … - `properties` object — Key-value pairs that provide additional information. - `region` V1SarifRegion - … - `relationships` V1SarifRelationship[] — An array of relationships between this location and other locations. - `description` V1SarifText - … - `kinds` string[] — A set of strings that describe the relationship. - `properties` object — Key/value pairs that provide additional information about the relationship. - `target` integer — The id of the location that is the target of the relationship. - `name` string, required — The (preferably) unique name of the code location. Could be a function ref or a module name. - `type` string — The type of the code location. - `semgrep_sink_trigger` V1SemgrepTriggerPattern — A pattern that triggered the vulnerability scan. - `pattern` V1SemgrepMetavariablePattern - `language` string - `metavariable` string - `pattern` string - `pattern_either` V1SemgrepRulePatternType[] - `by_side_effect` boolean - `exact` boolean - `focus_metavariable` string[] - `from` string - `label` string - `management` V1SemgrepManagement - … - `metavariable_analysis` V1SemgrepMetavariableAnalysis - … - `metavariable_comparison` V1SemgrepMetavariableComparison - … - `metavariable_pattern` V1SemgrepMetavariablePattern — recursive - `metavariable_regex` V1SemgrepMetavariableRegex - … - `metavariable_type` V1SemgrepMetavariableType - … - `not_conflicting` boolean - `pattern` string - `pattern_either_new` V1SemgrepRulePatternType[] - `pattern_inside` string - `pattern_inside_either` V1SemgrepRulePatternType[] - `pattern_not` string - `pattern_not_inside` string - `pattern_not_regex` string - `pattern_regex` string - `patterns` V1SemgrepRulePatternType[] - `requires` string - `to` string - `pattern_regex` string - `patterns` V1SemgrepRulePatternType[] - `by_side_effect` boolean - `exact` boolean - `focus_metavariable` string[] - `from` string - `label` string - `management` V1SemgrepManagement - … - `metavariable_analysis` V1SemgrepMetavariableAnalysis - … - `metavariable_comparison` V1SemgrepMetavariableComparison - … - `metavariable_pattern` V1SemgrepMetavariablePattern — recursive - `metavariable_regex` V1SemgrepMetavariableRegex - … - `metavariable_type` V1SemgrepMetavariableType - … - `not_conflicting` boolean - `pattern` string - `pattern_either_new` V1SemgrepRulePatternType[] - `pattern_inside` string - `pattern_inside_either` V1SemgrepRulePatternType[] - `pattern_not` string - `pattern_not_inside` string - `pattern_not_regex` string - `pattern_regex` string - `patterns` V1SemgrepRulePatternType[] - `requires` string - `to` string - `semgrep_source_trigger` V1SemgrepTriggerPattern — A pattern that triggered the vulnerability scan. - `pattern` V1SemgrepMetavariablePattern - `language` string - `metavariable` string - `pattern` string - `pattern_either` V1SemgrepRulePatternType[] - `by_side_effect` boolean - `exact` boolean - `focus_metavariable` string[] - `from` string - `label` string - `management` V1SemgrepManagement - … - `metavariable_analysis` V1SemgrepMetavariableAnalysis - … - `metavariable_comparison` V1SemgrepMetavariableComparison - … - `metavariable_pattern` V1SemgrepMetavariablePattern — recursive - `metavariable_regex` V1SemgrepMetavariableRegex - … - `metavariable_type` V1SemgrepMetavariableType - … - `not_conflicting` boolean - `pattern` string - `pattern_either_new` V1SemgrepRulePatternType[] - `pattern_inside` string - `pattern_inside_either` V1SemgrepRulePatternType[] - `pattern_not` string - `pattern_not_inside` string - `pattern_not_regex` string - `pattern_regex` string - `patterns` V1SemgrepRulePatternType[] - `requires` string - `to` string - `pattern_regex` string - `patterns` V1SemgrepRulePatternType[] - `by_side_effect` boolean - `exact` boolean - `focus_metavariable` string[] - `from` string - `label` string - `management` V1SemgrepManagement - … - `metavariable_analysis` V1SemgrepMetavariableAnalysis - … - `metavariable_comparison` V1SemgrepMetavariableComparison - … - `metavariable_pattern` V1SemgrepMetavariablePattern — recursive - `metavariable_regex` V1SemgrepMetavariableRegex - … - `metavariable_type` V1SemgrepMetavariableType - … - `not_conflicting` boolean - `pattern` string - `pattern_either_new` V1SemgrepRulePatternType[] - `pattern_inside` string - `pattern_inside_either` V1SemgrepRulePatternType[] - `pattern_not` string - `pattern_not_inside` string - `pattern_not_regex` string - `pattern_regex` string - `patterns` V1SemgrepRulePatternType[] - `requires` string - `to` string - `distribution_format` 'DISTRIBUTION_FORMAT_TYPE_UNSPECIFIED' | 'DISTRIBUTION_FORMAT_TYPE_PYTHON_SOURCE' | 'DISTRIBUTION_FORMAT_TYPE_PYTHON_EGG' | 'DISTRIBUTION_FORMAT_TYPE_PYTHON_WHEEL' — Distribution format type. - DISTRIBUTION_FORMAT_TYPE_PYTHON_SOURCE: Python source was used to build this package. - DISTRIBUTION_FORMAT_TYPE_PYTHON_EGG: Egg-info based distribution format for python. - DISTRIBUTION_FORMAT_TYPE_PYTHON_WHEEL: Dist-info based distribution format for python. - `ecosystem` 'ECOSYSTEM_UNSPECIFIED' | 'ECOSYSTEM_GO' | 'ECOSYSTEM_MAVEN' | 'ECOSYSTEM_PYPI' | 'ECOSYSTEM_CARGO' | 'ECOSYSTEM_NPM' | 'ECOSYSTEM_GEM' | 'ECOSYSTEM_NUGET' | 'ECOSYSTEM_PACKAGIST' | 'ECOSYSTEM_SBOM' | 'ECOSYSTEM_RPM' | 'ECOSYSTEM_DEBIAN' | 'ECOSYSTEM_GITHUB_ACTION' | 'ECOSYSTEM_COCOAPOD' | 'ECOSYSTEM_APK' | 'ECOSYSTEM_CONTAINER' | 'ECOSYSTEM_HUGGING_FACE' | 'ECOSYSTEM_C' | 'ECOSYSTEM_GIT' | 'ECOSYSTEM_AI_MODEL' | 'ECOSYSTEM_SWIFT' | 'ECOSYSTEM_CONAN' | 'ECOSYSTEM_VSCODE' — - ECOSYSTEM_GO: GoLang. - ECOSYSTEM_MAVEN: Maven. - ECOSYSTEM_PYPI: Python. - ECOSYSTEM_CARGO: Rust. - ECOSYSTEM_NPM: Javascript. - ECOSYSTEM_GEM: Ruby. - ECOSYSTEM_NUGET: Dotnet. - ECOSYSTEM_PACKAGIST: PHP. - ECOSYSTEM_SBOM: SBOMs. - ECOSYSTEM_RPM: RPM. - ECOSYSTEM_DEBIAN: Debian. - ECOSYSTEM_GITHUB_ACTION: GitHub Actions. - ECOSYSTEM_COCOAPOD: Cocoapods. - ECOSYSTEM_APK: APK (alpine et.al). - ECOSYSTEM_CONTAINER: Containers. - ECOSYSTEM_HUGGING_FACE: Hugging Face. - ECOSYSTEM_C: C/C++. - ECOSYSTEM_GIT: ecosystem GIT for GIT repository dependencies. This can be used for package name of the resolved dependencies when a given repository has dependencies to other GIT repositories. Currently we use this to represent vulnerabilities for the given GIT repository. ex: git submodules, C/C++ dependencies. - ECOSYSTEM_AI_MODEL: AI models. - ECOSYSTEM_SWIFT: Ecosystem Swift consists of native Swift packages, which are defined using the Package.swift manifest file and managed by the Swift Package Manager. There is a separate ecosystem for Cocoapod packages called ECOSYSTEM_COCOAPOD, which is an alternative package manager for Swift packages. - ECOSYSTEM_CONAN: Ecosystem Conan for C/C++ packages managed by the Conan 2.x package manager. - ECOSYSTEM_VSCODE: VS Code editor extensions, distributed via the Microsoft Visual Studio Marketplace. - `endor_fingerprint` SpecEndorFingerprint — An engine independent and rule agnostic fingerprint computed based on source location information. - `values` string[] — The fingerprint values. - `extra_key` string, required — Additional information that may result in creating a unique linter result. In some cases we may receive multiple results for the same project and the same file and we want to have multiple entries for the same field like parent_uuid, meta.name, and physical_location. By setting different values in this field, we will be able to create a separate result. Essentially, we will have a unique entry per field. - `fingerprint_count` integer - `fingerprints` string[] — The list and count of found fingerprints. The counter is maintained to ease the retrieval of these records in the analytics phase. - `level` 'LINTER_RESULT_LEVEL_UNSPECIFIED' | 'LINTER_RESULT_LEVEL_ERROR' | 'LINTER_RESULT_LEVEL_WARNING' | 'LINTER_RESULT_LEVEL_INFO' | 'LINTER_RESULT_LEVEL_DEBUG', required — The severity level of the linter result. Crafted using the Semgrep specification. - LINTER_RESULT_LEVEL_ERROR: ERROR indicates that a serious problem was found. - LINTER_RESULT_LEVEL_WARNING: WARNING indicates that a problem that is not considered serious was found. - LINTER_RESULT_LEVEL_INFO: INFO indicates that the notification is purely informational. - LINTER_RESULT_LEVEL_DEBUG: DEBUG indicates that this is a trace notification (debug). - `linter_correctness_analyses` V1LinterCorrectnessAnalysis[] — An analysis of the linter result. - `analysis_summary` string — Analysis summary, providing an explanation of the linter result and classification. - `analyzer` 'CORRECTNESS_ANALYZER_UNSPECIFIED' | 'CORRECTNESS_ANALYZER_AI_GEMINI_FLASH_2_5' | 'CORRECTNESS_ANALYZER_AI_GEMINI_FLASH_2_5_LITE' | 'CORRECTNESS_ANALYZER_AI_GEMINI_FLASH_LATEST' | 'CORRECTNESS_ANALYZER_AI_GEMINI_FLASH_LITE_LATEST', required — CorrectnessAnalyzer represents the analyzer used to determine the correctness of a linter result. - `code_fixes` LinterCorrectnessAnalysisCodeFix[] — Code fixes are potential fixes to the identified issue. - `file_path` string, required — The file path of the code fix. - `line_end` integer, required — The end line number of the code fix. - `line_start` integer, required — The start line number of the code fix. - `patch` string, required — The code fix to be applied. - `code_references` string — Textual description of line references/ fields/variables , etc for the linter result. - `confidence_level` 'CONFIDENCE_LEVEL_UNSPECIFIED' | 'CONFIDENCE_LEVEL_CRITICAL' | 'CONFIDENCE_LEVEL_HIGH' | 'CONFIDENCE_LEVEL_MEDIUM' | 'CONFIDENCE_LEVEL_LOW', required — Confidence level for the finding. - CONFIDENCE_LEVEL_CRITICAL: Critical finding. - CONFIDENCE_LEVEL_HIGH: Very important findings. - CONFIDENCE_LEVEL_MEDIUM: Important findings. - CONFIDENCE_LEVEL_LOW: Low priority finding. - `correctness` 'CORRECTNESS_UNSPECIFIED' | 'CORRECTNESS_TRUE_POSITIVE' | 'CORRECTNESS_FALSE_POSITIVE' | 'CORRECTNESS_FALSE_NEGATIVE' | 'CORRECTNESS_UNKNOWN', required — Correctness represents a correctness assessment. - CORRECTNESS_TRUE_POSITIVE: The AI analysis result is a true positive. - CORRECTNESS_FALSE_POSITIVE: The AI analysis result is a false positive. - CORRECTNESS_FALSE_NEGATIVE: The AI analysis result is a false negative. - CORRECTNESS_UNKNOWN: The AI analysis result is unknown. - `data_flow` LinterCorrectnessAnalysisDataFlowNode[] — Textual Description of the source to sink data flow analysis for the linter result. - `code_line_num` integer — Line number in the source file. - `code_snippet` string — Variable or expression at this point in the flow. - `type` string — Type of node in the data flow (source, step, or sink). - `description` string — The textual description of the linter correctness analysis. - `risk_assessment` string — Risk assessment for the linter result. Provides False/True positive classifaction and reasoning for the linter result.. - `sanitizers` string[] — The sanitizers used to determine the correctness of the linter result. - `security_control` string — Description of any sanitizers, validators, or mitigations found (or lack thereof) for the linter result. - `security_impact` string — Description of the security impact/potential consequences for the linter result. - `symbols` string — Key variables/symbols in the data flow path for the linter result. - `technical_detail` string — Further technical details (eg results about the vulnerability type and exploitation potential) for the linter result. - `version` string, required — The version of the linter correctness analysis. - `origin` 'LINTER_RESULT_ORIGIN_UNSPECIFIED' | 'LINTER_RESULT_ORIGIN_SEMGREP' | 'LINTER_RESULT_ORIGIN_SECRETS_SCANNER' | 'LINTER_RESULT_ORIGIN_SAST_SCANNER' | 'LINTER_RESULT_ORIGIN_LLM_SCANNER' | 'LINTER_RESULT_ORIGIN_AI_SAST_SCANNER', required — The origin of the linter result. - LINTER_RESULT_ORIGIN_SEMGREP: The semgrep tool reported this result. - LINTER_RESULT_ORIGIN_SECRETS_SCANNER: The secrets scanner reported this result. - LINTER_RESULT_ORIGIN_SAST_SCANNER: The SAST scanner reported this result. - LINTER_RESULT_ORIGIN_LLM_SCANNER: The LLM scanner reported this result. - LINTER_RESULT_ORIGIN_AI_SAST_SCANNER: The AI SAST scanner reported this result. - `project_uuid` string, required — The UUID of the project to which this result is related. - `ref` string — The Git reference of the repository version. - `sarif_result` V1SarifResult - `code_flows` V1SarifCodeFlow[] — Code flow object representing a sequence of code locations that specify a data flow path. - `message` V1SarifText - `markdown` string — Markdown representation of the content. - `text` string - `thread_flows` V1SarifThreadFlow[] - `id` string - `immutable_state` object - `initial_state` object - `locations` V1SarifThreadFlowLocation[], required - `execution_order` integer - `execution_time_utc` string - `importance` 'IMPORTANCE_UNSPECIFIED' | 'IMPORTANCE_IMPORTANT' | 'IMPORTANCE_ESSENTIAL' | 'IMPORTANCE_UNIMPORTANT' — Specifies the importance of this location in understanding the code flow. - `index` integer - `kinds` string[] - `location` V1SarifLocation - … - `module` string - `nesting_level` integer - `stack` V1SarifStack — Represents a call stack. - … - `state` object - `taxa` V1SarifReportingDescriptorReference[] — A set of distinct strings that categorize the thread flow location. - … - `web_request` V1SarifWebRequest — Describes an HTTP request. - … - `web_response` V1SarifWebResponse — Describes an HTTP response. - … - `message` V1SarifText - `markdown` string — Markdown representation of the content. - `text` string - `fingerprints` V1SarifFingerprint - `author` string - `commit_message` string - `commit_sha` string - `date` string - `email` string - `hash` string - `id` string - `level` string - `locations` V1SarifLocation[] - `annotations` V1SarifRegion[] - `end_column` integer - `end_line` integer - `snippet` V1SarifText - `markdown` string — Markdown representation of the content. - `text` string - `start_column` integer - `start_line` integer - `id` integer — A unique identifier for this location object. - `logical_locations` V1SarifLogicalLocation[] — The logical locations associated with a physical location. - `decorated_name` string — The name of the decorated logical location. - `fully_qualified_name` string — The fully qualified name of the logical location. - `index` integer — The 0-based index of this logical location in an array of logical locations. - `kind` string — The kind of logical location. - `name` string — The name of the logical location. - `parent_index` integer — The name of the parent of this logical location. - `properties` object — Key/value pairs that provide additional information. - `message` V1SarifText - `markdown` string — Markdown representation of the content. - `text` string - `physical_location` SarifLocationPhysicalLocation - `artifact_location` V1SarifArtifactLocation - `uri` string - `uri_base_id` string - `properties` object — Key-value pairs that provide additional information. - `region` V1SarifRegion - `end_column` integer - `end_line` integer - `snippet` V1SarifText - … - `start_column` integer - `start_line` integer - `relationships` V1SarifRelationship[] — An array of relationships between this location and other locations. - `description` V1SarifText - `markdown` string — Markdown representation of the content. - `text` string - `kinds` string[] — A set of strings that describe the relationship. - `properties` object — Key/value pairs that provide additional information about the relationship. - `target` integer — The id of the location that is the target of the relationship. - `message` V1SarifText - `markdown` string — Markdown representation of the content. - `text` string - `partial_fingerprints` V1SarifFingerprint - `author` string - `commit_message` string - `commit_sha` string - `date` string - `email` string - `hash` string - `id` string - `properties` V1SarifResultProperty - `action_policies_triggered` string[] - `categories` string[] - `cvss_score` number, float - `cvss_vector` string - `cvss_version` 'CVSS_VERSION_UNSPECIFIED' | 'CVSS_VERSION_V2' | 'CVSS_VERSION_V3' | 'CVSS_VERSION_V4' — The CVSS version. - `epss_percentile_score` number, double - `epss_probability_score` number, double - `explanation` string - `finding_url` string - `finding_uuid` string - `impact_score` number, float - `project_uuid` string - `remediation` string - `tags` string[] - `rule_id` string - `suppressions` V1SarifSuppression[] - `kind` 'KIND_UNSPECIFIED' | 'KIND_IN_SOURCE' | 'KIND_EXTERNAL' — - KIND_IN_SOURCE: Suppression is in the source code. - KIND_EXTERNAL: Suppression is external to the source code. - `secret` V1SecretSummary - `fs_scanned` boolean - `git_log_scanned` boolean — Set when the secret was discovered by looking in the Git logs using the full history option. - `secret_id` string — Same value for two linter results with the same secret found in different locations. - `validation` 'VALIDATION_STATUS_UNSPECIFIED' | 'VALIDATION_STATUS_FAILURE' | 'VALIDATION_STATUS_SECRET_IS_VALID' | 'VALIDATION_STATUS_SECRET_IS_INVALID' — Status of secret validation. - VALIDATION_STATUS_UNSPECIFIED: No validator. - VALIDATION_STATUS_FAILURE: Failed to validate secret. - VALIDATION_STATUS_SECRET_IS_VALID: Secret is valid. - VALIDATION_STATUS_SECRET_IS_INVALID: Secret is invalid - `semgrep` V1SemgrepSummary — Semgrep summary. - `ai_provider` string - `confidence` string - `cwes` string[] - `description` string - `explanation` string - `impact` string - `languages` string[] - `likelihood` string - `references` string[] - `remediation` string - `rule_name` string - `rule_uuid` string - `rule_version` string - `severity` string - `tags` string[] - `storage_location` string — The storage location of the package related to this linter result. - `suppressed` boolean — Result was suppressed by semgrep (e.g. because of a "nosemgrep" code annotation). - `version` string - `tenant_meta` V1TenantMeta — Tenant related data for the tenant containing the resource. - `namespace` string, required — Namespaces are a way to organize organizational units into virtual groupings of resources. Namespaces must be a fully qualified name, for example, the child namespace of namespace "endor.prod" called "app" is called "endor.prod.app". - `uuid` string — The UUID of a linter result. ## Other responses - `default` — An unexpected error response. --- [API](https://skmtc.net/endorlabs/apis/endor-labs-rest-api-reference.md) · [All operations](https://skmtc.net/endorlabs/apis/endor-labs-rest-api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/endorlabs/endor-labs-rest-api-reference/versions/2fe1f84213b3/schema)