v1
latestOpenAPI 3.0.02026-07-249055687.1 KBList latest alerts (Beta)
List latest alerts.
Pagination: keep requesting pages (passing the previous response's endCursor as startAfterCursor) until endCursor is null. Do not stop when items is empty — an empty page can be returned while more results still remain on later pages, so endCursor being null is the only reliable end-of-results signal.
This endpoint consumes 10 units of your quota.
This endpoint requires the following org token scopes:
- alerts:list
Path parameters
The slug of the organization
Query parameters
Specify the maximum number of results to return per page (intermediate pages may have fewer than this limit and callers should always check "endCursor" in response body to know if there are more pages)
The pagination cursor that was returned as the "endCursor" property in previous request
Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be included
Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be excluded
Comma-separated list of alert action source types ("resolution", "alert-policy", "fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be included
Comma-separated list of alert action source types ("resolution", "alert-policy", "fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be excluded
Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be included
Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be excluded
Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone)
Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone)
Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone)
Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone)
Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone)
Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone)
Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone)
Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone)
Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone)
Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone)
CVE ID
CVE ID
CVE title
CVE title
CWE ID
CWE ID
CWE name
CWE name
Alert EPSS ("low", "medium", "high", "critical")
Alert EPSS ("low", "medium", "high", "critical")
Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be included
Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be excluded
Alert KEV (Known Exploited Vulnerability) filter flag
Alert KEV (Known Exploited Vulnerability) filter flag
Alert priority ("low", "medium", "high", or "critical")
Alert priority ("low", "medium", "high", or "critical")
Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be included
Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be excluded
Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be included
Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be excluded
Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be included
Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be excluded
A single alert status ("open" or "cleared")
A single alert status ("open" or "cleared")
Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be included
Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be excluded
Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone)
Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone)
Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone)
Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone)
Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone)
Name of artifact
Name of artifact
Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be included
Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be excluded
Comma-separated list of branch names that should be included
Comma-separated list of branch names that should be excluded
Comma-separated list of patch statuses ("patch_unavailable", "patch_available", or "patch_applied") that should be included
Comma-separated list of patch statuses ("patch_unavailable", "patch_available", or "patch_applied") that should be excluded
Dead/reachable dependency filter flag
Dead/reachable dependency filter flag
Development/production dependency filter flag
Development/production dependency filter flag
Direct/transitive dependency filter flag
Direct/transitive dependency filter flag
Comma-separated list of repo full names that should be included
Comma-separated list of repo full names that should be excluded
Comma-separated list of repo labels that should be included. Use "" to filter for repositories with no labels.
Comma-separated list of repo labels that should be excluded. Use "" to filter for repositories with no labels.
Comma-separated list of repo slugs that should be included
Comma-separated list of repo slugs that should be excluded
Response
The paginated array of alert items for the organization and related metadata.