---
title: "POST /experimental/security-review-runs"
method: POST
path: "/experimental/security-review-runs"
tags: ["Security Review Runs"]
---

# POST /experimental/security-review-runs

`POST /experimental/security-review-runs`

Creates a new security review run and starts the security-review workflow.

## Headers

- `Authorization` string

## Request body

- object
  - `uploadKey` string, required
  - `workspaceId` string, uuid, required
  - `label` string
  - `force` boolean
  - `metadata` object
    - `subject` object
      - `type` 'skill', required
      - `name` string, required
      - `path` string

## Response `201`

Default Response

- object
  - `links` object, required
    - `self` string, uri, required
  - `data` object, required
    - `id` string, uuid, required
    - `type` 'security-review-run', required
    - `attributes` object, required
      - `workflowId` string, nullable, required
      - `status` union, required
        - 'pending'
        - 'completed'
        - 'failed'
      - `createdAt` string, date-time, required
      - `updatedAt` string, date-time, required

## Other responses

- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found
- `500` — Internal Server Error

---

[API](https://skmtc.net/tessl/apis/tessl-api.md) · [All operations](https://skmtc.net/tessl/apis/tessl-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/tessl/tessl-api/versions/fbb186825642/schema)