v2

latestOpenAPI 3.0.1private2026-07-2667209320.4 KB
Repositories

List repositories

List Repositories

List all repositories found via repository integrations for the given organization.

Usage:

Results are paginated via the previous and next page keys. To get additional pages, use the nextPageKey or previousPageKey from the response and send back in as the page query param. When the page parameter is provided, all other query parameters are ignored.

Additional Parameters:

  • query - fuzzy find repositories by name.
  • sortField - the field to sort the repositories by.
  • sortDir - direction to sort.
  • pageSize- number of results to return.
  • pageToken - zero-based index of the page to return.
  • filters - comma separated list of named filters to apply.

Requires read:repository permission.

get/api/v1/org/{orgId}/repos

Path parameters

orgIdstring uuid required

UUID identifier for this StackHawk Organization.

Query parameters

querystring

A term used to filter results based on matching content in one or more fields.

sortField'id' | 'fullName' | 'lastCommit' | 'lastContributor' | 'lastScanTimeStamp' | 'stackHawkApplication' | 'score' | 'status' | 'commitCount' | 'sensitiveTagsCount'

Resource field to sort paginated response by.

sortDir'ASC' | 'DESC' | 'UNSORTED'

Paginated results are sorted 'asc' or 'desc'.

pageSizeinteger

Pagination response size limit.

pageTokeninteger

Pagination request page increment.

pagestring

Pagination page key.

repoFilter'ALL_REPOS' | 'UNMAPPED_REPOS' | 'MAPPED_REPOS' | 'HIDDEN_REPOS' | 'REPOS_WITH_APP_SCANS' | 'REPOS_WITH_NO_APP_SCANS' | 'REPOS_WITH_INSIGHTS' | 'REPOS_WITH_NO_INSIGHTS' | 'WEB_APP_REPOS' | 'REPOS_IN_ATTACK_SURFACE' | 'REPOS_NOT_IN_ATTACK_SURFACE' | 'UNCOVERED_REPOS' | 'REPOS_WITH_RECENT_SCANS' | 'REPOS_WITH_GENERATED_OAS' | 'REPOS_WITHOUT_GENERATED_OAS' | 'REPOS_WITHOUT_RECENT_SCANS'

Repository search filter (Deprecated: Use filters param instead).

appFilter'ALL_REPOS' | 'UNMAPPED_REPOS' | 'MAPPED_REPOS' | 'HIDDEN_REPOS' | 'REPOS_WITH_APP_SCANS' | 'REPOS_WITH_NO_APP_SCANS' | 'REPOS_WITH_INSIGHTS' | 'REPOS_WITH_NO_INSIGHTS' | 'WEB_APP_REPOS' | 'REPOS_IN_ATTACK_SURFACE' | 'REPOS_NOT_IN_ATTACK_SURFACE' | 'UNCOVERED_REPOS' | 'REPOS_WITH_RECENT_SCANS' | 'REPOS_WITH_GENERATED_OAS' | 'REPOS_WITHOUT_GENERATED_OAS' | 'REPOS_WITHOUT_RECENT_SCANS'

Repository search application filter (Deprecated: Use filters param instead).

langIdsstring[]

A comma-delimited list of UUID identifiers of repository languages.

topicIdsstring[]

A comma-delimited list of UUID identifiers of repository topics.

frameworkNamesstring[]

A comma-delimited list of String identifiers of repository frameworks.

repositorySourcestring[]

A comma-delimited list of repository source types.

integrationIdsstring[]

A comma-delimited list of integration UUIDs to filter repositories by specific integrations.

sensitiveDataTagsstring[]

A comma-delimited list of sensitive data tags for repositories.

recentCommitTimeframe'LAST_COMMIT_DATE_UNSPECIFIED' | 'LAST_24_HOURS' | 'LAST_7_DAYS' | 'LAST_14_DAYS' | 'LAST_30_DAYS' | 'OVER_30_DAYS' | 'LAST_90_DAYS' | 'LAST_180_DAYS' | 'LAST_365_DAYS'

The timeframe of the most recent commit for a repo.

webAppFilter'ALL_REPOS' | 'UNMAPPED_REPOS' | 'MAPPED_REPOS' | 'HIDDEN_REPOS' | 'REPOS_WITH_APP_SCANS' | 'REPOS_WITH_NO_APP_SCANS' | 'REPOS_WITH_INSIGHTS' | 'REPOS_WITH_NO_INSIGHTS' | 'WEB_APP_REPOS' | 'REPOS_IN_ATTACK_SURFACE' | 'REPOS_NOT_IN_ATTACK_SURFACE' | 'UNCOVERED_REPOS' | 'REPOS_WITH_RECENT_SCANS' | 'REPOS_WITH_GENERATED_OAS' | 'REPOS_WITHOUT_GENERATED_OAS' | 'REPOS_WITHOUT_RECENT_SCANS'

Return only repos with a high Hawkscore, indicating a web app. Defaults to ALL_REPOS, set to WEB_APP_REPOS to get only retrieve webapps.

uncoveredRepoFilter'ALL_REPOS' | 'UNMAPPED_REPOS' | 'MAPPED_REPOS' | 'HIDDEN_REPOS' | 'REPOS_WITH_APP_SCANS' | 'REPOS_WITH_NO_APP_SCANS' | 'REPOS_WITH_INSIGHTS' | 'REPOS_WITH_NO_INSIGHTS' | 'WEB_APP_REPOS' | 'REPOS_IN_ATTACK_SURFACE' | 'REPOS_NOT_IN_ATTACK_SURFACE' | 'UNCOVERED_REPOS' | 'REPOS_WITH_RECENT_SCANS' | 'REPOS_WITH_GENERATED_OAS' | 'REPOS_WITHOUT_GENERATED_OAS' | 'REPOS_WITHOUT_RECENT_SCANS'

Return only uncovered repos, which are repos that are in the org's attack surface, but not mapped to any applications. Defaults to ALL_REPOS, set to UNCOVERED_REPOS to get only uncovered repos.

filtersstring[]

A comma-delimited list of repository search filters.

Response

OK

hasNextboolean

Whether or not there is a next page.

hasPrevboolean

Whether or not there is a previous page.

nextPageKeystring

The url-encoded next page key.

orgIdstring

The organization id these repositories belong to.

prevPageKeystring

An internal previous page object. Will always be blank from the API response.

totalCountinteger

The total number of repositories in this organization.