---
title: "List repositories with dependencies"
method: POST
path: "/api/v1/deployments/{deploymentId}/dependencies/repositories"
tags: ["SupplyChainService"]
---

# List repositories with dependencies

`POST /api/v1/deployments/{deploymentId}/dependencies/repositories`

## Path parameters

- `deploymentId` string, int64, required — Deployment ID (numeric). Example: `123`. Can be found at `/deployments`, or in your Settings in the web UI.

## Request body

- ProtosOpenapiV1ListRepositoriesForDependenciesRequest
  - `cursor` number — Use cursor in response to get next page of results.
  - `dependencyFilter` ProtosScaV1DependencyFilter — Object to provide dependency details to filter by.
    - `name` string — Deprecated - use package_filters instead. Filter by dependency name (e.g. lodash).
    - `version` string — Deprecated - use package_filters instead. Filter by dependency version (e.g. 1.0.1).
    - `repositoryId` integer[] — Repository IDs (numeric) to filter by. Omit if the endpoint has Repository ID as a path parameter. Use Projects endpoints to retrieve Repository IDs.
    - `transitivity` string[] — Filter by transitivity. | value | description | |-------|---------------| | UNKNOWN_TRANSITIVITY | | | TRANSITIVE | | | DIRECT | |
    - `ecosystem` string[] — Filter by ecosystem (e.g. npm, pypi, etc). | value | description | |-------|---------------| | no_package_manager | | | npm | | | pypi | | | gomod | | | cargo | | | maven | | | gem | | | composer | | | nuget | | | pub | | | swiftpm | | | hex | | | cocoapods | | | mix | | | opam | |
    - `lockfilePath` string — Filter by path to the lockfile (e.g. `foo/bar/package-lock.json`).
    - `licensePolicySettings` string[] — Filter by license policy setting outcome. | value | description | |-------|---------------| | LICENSE_POLICY_SETTING_ALLOW | | | LICENSE_POLICY_SETTING_COMMENT | | | LICENSE_POLICY_SETTING_BLOCK | |
    - `license` string[] — Filter by license (e.g. MIT).
    - `packageFilters` ProtosScaV1PackageFilter[] — Multiple package filters with exact name matching and version bounds.
      - `name` string — Exact package name (e.g. lodash).
      - `versionLowerBound` string — Lower bound version constraint (e.g. ">=1.0.0"). Ignored if exact_version is set.
      - `versionUpperBound` string — Upper bound version constraint (e.g. "<2.0.0"). Ignored if exact_version is set.
      - `exactVersion` string — Exact version match (e.g. "1.0.0"). Takes precedence over version bounds if set.
      - `exactNameMatch` boolean — When true, name must match exactly. When false (default), name is fuzzy-matched (contains).
  - `deploymentId` string, int64 — Deployment ID (numeric). Example: `123`. Can be found at `/deployments`, or in your Settings in the web UI.
  - `pageSize` number — Number of repositories per page. Default: 5, min: 1, max: 100.

## Response `200`

OK

- ProtosOpenapiV1ListRepositoriesForDependenciesResponse
  - `cursor` number — Pass to next request to get next page of results.
  - `hasMore` boolean — True if there are more repositories to get.
  - `repositorySummaries` ProtosScaV1RepositoryDependencySummary[] — List of repositories.
    - `id` integer — ID of repository.
    - `name` string — Name of repository.
    - `numDependencies` integer — Total number of dependencies in the repository.
    - `hasDependencyPathScan` boolean — True if the repository has been scanned with the `hasPathToTransitivityInScans` feature flag which means it will have dependency graph data in DGraph available to query

---

[API](https://skmtc.net/semgrep/apis/semgrep-web-app.md) · [All operations](https://skmtc.net/semgrep/apis/semgrep-web-app/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/semgrep/semgrep-web-app/revisions/6483eeecd582/schema)