---
title: "Update SAST & IaC AutoFix PR creation settings"
method: PUT
path: "/repositories/autofix/sast/settings"
---

# Update SAST & IaC AutoFix PR creation settings

`PUT /repositories/autofix/sast/settings`

## Request

- Base URL: `https://app.aikido.dev/api/public/v1`
- URL: `https://app.aikido.dev/api/public/v1/repositories/autofix/sast/settings`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://app.aikido.io/api/oauth/token` scopes: `autofix:write`

Update the workspace SAST & IaC AutoFix PR creation settings. PRs are created and re-evaluated every day. Use severity_filter to set which severities to autofix. Use repos_scope of "all" or "selected"; when "selected", pass repository IDs in repo_ids. Inactive or unknown repository IDs are filtered out. "all" is paying accounts only. Send enabled: false to turn SAST AutoFix off; the other fields are then ignored. This only affects SAST AutoFix, other AutoFix features keep their own settings.

## Request body

- union
  - object
    - `enabled` true, required: Enables automatic SAST & IaC AutoFix PR creation.
    - `severity_filter` 'critical_issues_only' | 'critical_and_high_only' | 'all', required: Severity filter for SAST & IaC autofix.
    - `repos_scope` 'all' | 'selected', required: Repository scope for SAST & IaC autofix: all repositories or a selected list. "all" is paying accounts only.
    - `repo_ids` integer[], required: Code repository IDs for SAST & IaC autofix when repos_scope is "selected". Ignored when scope is "all"; use an empty array in that case. Inactive or unknown repository IDs are filtered out and not stored.
  - object
    - `enabled` false, required: Disables automatic SAST & IaC AutoFix PR creation. The other fields are ignored and may be omitted.

## Response `200`

The SAST & IaC AutoFix settings were updated.

- object
  - `success` integer: 1 indicating success

## Other responses

- `400`: Invalid configuration (e.g. select all on a non-paying account).

---

[API](https://skmtc.dev/aikido/apis/aikido-security-api-documentation.md) - [All operations](https://skmtc.dev/aikido/apis/aikido-security-api-documentation/llms.txt) - [OpenAPI document](https://skmtc.dev/aikido/apis/aikido-security-api-documentation/revisions/da8691338133?raw)