---
title: "Validate Scan Configuration"
method: POST
path: "/api/v1/configuration/{orgId}/validate"
tags: ["Scan Configuration"]
---

# Validate Scan Configuration

`POST /api/v1/configuration/{orgId}/validate`

Validates a HawkScan Configuration for potential problems.


> Requires `read:scan_config` permission.

## Path parameters

- `orgId` string, uuid, required

## Request body

- ConfigurationUpsertScanConfigurationRequest — Request to update an organization scan configuration
  - `conf` string — The HawkScan YAML configuration to save for this organization.
  - `configType` 'ORG' | 'APP' | 'TARGET' — Whether the app is tied to a single application or shared by an organization.
  - `name` string — The name of this saved scan configuration. The name should match the conf appId if the configuration is saved for an organization's application.

## Response `200`

* a response of validation problems (markers) for an asset, that work with code editor linters

- ConfigurationValidatedAssetResponse — * a response of validation problems (markers) for an asset, that work with code editor linters
  - `markers` ConfigurationMarker[] — the list of schema validation markers
    - `code` string — problem code line
    - `endColumn` integer
    - `endLineNumber` integer
    - `message` string — problem message
    - `owner` string — "StackHawk"
    - `resource` string — name of validated file
    - `severity` 'HINT' | 'INFO' | 'WARNING' | 'ERROR' — severity of the problem
    - `source` string — source deriving where the problem definition comes from
    - `startColumn` integer
    - `startLineNumber` integer

## Other responses

- `400` — Bad Request
- `401` — Unauthorized

---

[API](https://skmtc.net/stackhawk/apis/stackhawk-public-api.md) · [All operations](https://skmtc.net/stackhawk/apis/stackhawk-public-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/stackhawk/stackhawk-public-api/versions/ad3dfd54cb63/schema)