v1
latestOpenAPI 3.0.02026-07-249055687.1 KBList historical alerts (Beta)
List historical alerts.
Pagination: keep requesting pages (passing the previous response's endCursor as startAfterCursor) until endCursor is null. Do not stop when items is empty — an empty page can be returned while more results still remain on later pages, so endCursor being null is the only reliable end-of-results signal.
This endpoint consumes 10 units of your quota.
This endpoint requires the following org token scopes:
- historical:alerts-list
Path parameters
The slug of the organization
Query parameters
The UTC date in YYYY-MM-DD format for which to fetch alerts
The number of days of data to fetch as an offset from input date (e.g. "-7d" or "7d") or use "latest" to query for latest alerts for each repo
Specify the maximum number of results to return per page (intermediate pages may have fewer than this limit and callers should always check "endCursor" in response body to know if there are more pages)
The pagination cursor that was returned as the "endCursor" property in previous request
Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be included
Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be excluded
Comma-separated list of alert action source types ("resolution", "alert-policy", "fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be included
Comma-separated list of alert action source types ("resolution", "alert-policy", "fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be excluded
Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be included
Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be excluded
CVE ID
CVE ID
CVE title
CVE title
CWE ID
CWE ID
CWE name
CWE name
Alert EPSS ("low", "medium", "high", "critical")
Alert EPSS ("low", "medium", "high", "critical")
Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be included
Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be excluded
Alert KEV (Known Exploited Vulnerability) filter flag
Alert KEV (Known Exploited Vulnerability) filter flag
Alert priority ("low", "medium", "high", or "critical")
Alert priority ("low", "medium", "high", or "critical")
Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be included
Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be excluded
Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be included
Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be excluded
Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be included
Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be excluded
Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be included
Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be excluded
Name of artifact
Name of artifact
Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be included
Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be excluded
Comma-separated list of branch names that should be included
Comma-separated list of branch names that should be excluded
Comma-separated list of patch statuses ("patch_unavailable", "patch_available", or "patch_applied") that should be included
Comma-separated list of patch statuses ("patch_unavailable", "patch_available", or "patch_applied") that should be excluded
Dead/reachable dependency filter flag
Dead/reachable dependency filter flag
Development/production dependency filter flag
Development/production dependency filter flag
Direct/transitive dependency filter flag
Direct/transitive dependency filter flag
Comma-separated list of repo full names that should be included
Comma-separated list of repo full names that should be excluded
Comma-separated list of repo labels that should be included. Use "" to filter for repositories with no labels.
Comma-separated list of repo labels that should be excluded. Use "" to filter for repositories with no labels.
Comma-separated list of repo slugs that should be included
Comma-separated list of repo slugs that should be excluded
Response
The paginated array of API tokens for the organization, and related metadata.