--- title: "CreateSecurityReviewQuery." method: POST path: "/v1/namespaces/{tenant_meta.namespace}/queries/security-review" tags: ["SecurityReviewQueryService"] --- # CreateSecurityReviewQuery. `POST /v1/namespaces/{tenant_meta.namespace}/queries/security-review` ## Request - Base URL: `https://api.endorlabs.com` - URL: `https://api.endorlabs.com/v1/namespaces/{tenant_meta.namespace}/queries/security-review` - Auth: none declared Creates a security review dashboard summary query. ## Path parameters - `tenant_meta.namespace` string, required ## Request body - SecurityReviewQueryServiceCreateSecurityReviewQueryBody: SecurityReviewQuery is an internal API to accelerate the Security Review dashboard operations. - `meta` V1Meta, required: Common fields for all Endor Labs resources. - `annotations` object: Annotations can be used to attach metadata to a resource message. Annotation values can be small or large, structured or unstructured, and may include characters not permitted by labels. The keys may contain alphanumerics, underscores (_), dots (.) and dashes (-). The values of an annotation must be 16384 bytes or smaller. - `create_time` string, date-time: Time the resource was created. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt. - `created_by` string: Name and authentication source of the user who created the object, for example, ewok@endor.ai@google@api-key. - `description` string: Resource description. Must be less than 1024 bytes. - `index_data` V1IndexData: IndexData is used to index the resource for search. It's an internal object. - `data` string[] - `search_score` number, float: search_score is the score of the resource for search. Internal use only. - `tenant` string - `will_be_deleted_at` string, date-time: Time that the resource will be deleted. - `kind` string: Resource kind, for example, HelloResponse. Auto-generated using the protobuf message proto.MessageName().Name(). - `name` string, required: Resource name. Must be 63 characters or less. - `parent_kind` string: Parent object resource kind, for example, Project. - `parent_uuid` string: Parent object UUID. - `references` object: Map of objects referenced in a query API. - `tags` string[]: List of tags attached to the resource. Tags can be used to select objects and to find collections of objects that satisfy certain conditions. A tag must be 255 characters or less. - `update_time` string, date-time: Time the resource was last updated. Note: Updated on all create/patch/delete operations. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt. - `updated_by` string: Name and authentication source of the last user who updated the object, for example, vulnerabilityingestor@endor.ai@x509. - `upsert_time` string, date-time: Time the resource was last upserted. Note: create_time is only set the first time the resource is created. upsert_time is set every time the resource is upseted. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt. - `version` string: Message version. - `spec` V1SecurityReviewQuerySpec - `request` SpecSRRequest - `finding_severities` SpecSecurityReviewLevel[]: Severities to include in the summary. - `project_filter` string: Filter to select project. - `review_time_config` DashboardConfigReviewTimeConfig: Configuration for calculating review time saved. - `large_pr_minutes` integer: Time in minutes to review a large PR (more than 500 lines). - `medium_pr_minutes` integer: Time in minutes to review a medium PR (100-500 lines). - `small_pr_minutes` integer: Time in minutes to review a small PR (less than 100 lines). - `time_range` SpecSRRequestTimeRange: Time range filtering. - `end` string, date-time: End time for filtering (inclusive). - `start` string, date-time: Start time for filtering (inclusive). - `traverse` boolean: Whether to traverse child namespaces. - `response` SpecSRResponse - `commits` integer: Total number of commits reviewed. - `projects` integer: Projects enabled for security review. - `prs_with_summaries` integer: Total number of PRs with summaries. - `prs_without_summaries` integer: Total number of PRs without summaries. - `pull_requests` integer: Pull requests reviewed (latest PR scans only). - `review_time_saved_min` number, double: Review time saved (in minutes). - `safe_pull_requests` integer: Number of safe pull requests. - `security_review_findings` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `security_reviews` integer: Total number of security review performed. - `top_categories` SRResponseCategoryInfo[]: Top categories by various metrics. - `finding_counts` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `name` string: Category name. - `top_languages` SRResponseLanguageInfo[]: Top languages by various metrics. - `finding_counts` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `language` string: Programming language. - `top_projects` TopProjectsProjectInfo[]: Top projects by various metrics. - `dependency_counts` SpecResponseDependencyCounts - `direct` integer: Number of direct dependencies. - `outdated` integer: Number of outdated dependencies. - `total` integer: Total number of dependencies. - `transitive` integer: Number of transitive dependencies. - `unmaintained` integer: Number of unmaintained dependencies. - `finding_counts` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `name` string: Project name. - `uuid` string: Project UUID. - `vulnerability_counts` SpecResponseVulnerabilityCounts - `exploitable_likelihood` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `exploitable_likelihood_potentially_reachable` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `exploitable_likelihood_reachable` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `low_upgrade_risk` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `low_upgrade_risk_potentially_reachable` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `low_upgrade_risk_reachable` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `normal` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `normal_fixable` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `normal_fixable_potentially_reachable` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `normal_fixable_reachable` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `normal_fixable_unreachable` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `potentially_reachable` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `reachable` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `total` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `unreachable` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `tenant_meta` object: Security Review Dashboard Summary are associated with a tenant. - `uuid` string: The UUID of the security review dashboard summary. ## Response `200` A successful response. - V1SecurityReviewQuery: SecurityReviewQuery is an internal API to accelerate the Security Review dashboard operations. - `meta` V1Meta, required: Common fields for all Endor Labs resources. - `annotations` object: Annotations can be used to attach metadata to a resource message. Annotation values can be small or large, structured or unstructured, and may include characters not permitted by labels. The keys may contain alphanumerics, underscores (_), dots (.) and dashes (-). The values of an annotation must be 16384 bytes or smaller. - `create_time` string, date-time: Time the resource was created. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt. - `created_by` string: Name and authentication source of the user who created the object, for example, ewok@endor.ai@google@api-key. - `description` string: Resource description. Must be less than 1024 bytes. - `index_data` V1IndexData: IndexData is used to index the resource for search. It's an internal object. - `data` string[] - `search_score` number, float: search_score is the score of the resource for search. Internal use only. - `tenant` string - `will_be_deleted_at` string, date-time: Time that the resource will be deleted. - `kind` string: Resource kind, for example, HelloResponse. Auto-generated using the protobuf message proto.MessageName().Name(). - `name` string, required: Resource name. Must be 63 characters or less. - `parent_kind` string: Parent object resource kind, for example, Project. - `parent_uuid` string: Parent object UUID. - `references` object: Map of objects referenced in a query API. - `tags` string[]: List of tags attached to the resource. Tags can be used to select objects and to find collections of objects that satisfy certain conditions. A tag must be 255 characters or less. - `update_time` string, date-time: Time the resource was last updated. Note: Updated on all create/patch/delete operations. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt. - `updated_by` string: Name and authentication source of the last user who updated the object, for example, vulnerabilityingestor@endor.ai@x509. - `upsert_time` string, date-time: Time the resource was last upserted. Note: create_time is only set the first time the resource is created. upsert_time is set every time the resource is upseted. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt. - `version` string: Message version. - `spec` V1SecurityReviewQuerySpec - `request` SpecSRRequest - `finding_severities` SpecSecurityReviewLevel[]: Severities to include in the summary. - `project_filter` string: Filter to select project. - `review_time_config` DashboardConfigReviewTimeConfig: Configuration for calculating review time saved. - `large_pr_minutes` integer: Time in minutes to review a large PR (more than 500 lines). - `medium_pr_minutes` integer: Time in minutes to review a medium PR (100-500 lines). - `small_pr_minutes` integer: Time in minutes to review a small PR (less than 100 lines). - `time_range` SpecSRRequestTimeRange: Time range filtering. - `end` string, date-time: End time for filtering (inclusive). - `start` string, date-time: Start time for filtering (inclusive). - `traverse` boolean: Whether to traverse child namespaces. - `response` SpecSRResponse - `commits` integer: Total number of commits reviewed. - `projects` integer: Projects enabled for security review. - `prs_with_summaries` integer: Total number of PRs with summaries. - `prs_without_summaries` integer: Total number of PRs without summaries. - `pull_requests` integer: Pull requests reviewed (latest PR scans only). - `review_time_saved_min` number, double: Review time saved (in minutes). - `safe_pull_requests` integer: Number of safe pull requests. - `security_review_findings` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `security_reviews` integer: Total number of security review performed. - `top_categories` SRResponseCategoryInfo[]: Top categories by various metrics. - `finding_counts` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `name` string: Category name. - `top_languages` SRResponseLanguageInfo[]: Top languages by various metrics. - `finding_counts` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `language` string: Programming language. - `top_projects` TopProjectsProjectInfo[]: Top projects by various metrics. - `dependency_counts` SpecResponseDependencyCounts - `direct` integer: Number of direct dependencies. - `outdated` integer: Number of outdated dependencies. - `total` integer: Total number of dependencies. - `transitive` integer: Number of transitive dependencies. - `unmaintained` integer: Number of unmaintained dependencies. - `finding_counts` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `name` string: Project name. - `uuid` string: Project UUID. - `vulnerability_counts` SpecResponseVulnerabilityCounts - `exploitable_likelihood` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `exploitable_likelihood_potentially_reachable` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `exploitable_likelihood_reachable` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `low_upgrade_risk` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `low_upgrade_risk_potentially_reachable` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `low_upgrade_risk_reachable` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `normal` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `normal_fixable` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `normal_fixable_potentially_reachable` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `normal_fixable_reachable` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `normal_fixable_unreachable` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `potentially_reachable` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `reachable` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `total` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `unreachable` SpecResponseFindingCounts - `critical` integer: Number of critical findings. - `dismissed` integer: Number of dismissed findings. - `high` integer: Number of high severity findings. - `low` integer: Number of low severity findings. - `medium` integer: Number of medium severity findings. - `total` integer: Total number of findings. - `tenant_meta` V1TenantMeta: Tenant related data for the tenant containing the resource. - `namespace` string, required: Namespaces are a way to organize organizational units into virtual groupings of resources. Namespaces must be a fully qualified name, for example, the child namespace of namespace "endor.prod" called "app" is called "endor.prod.app". - `uuid` string: The UUID of the security review dashboard summary. ## Other responses - `default`: An unexpected error response. ## Changes - **2026-11-03** `4acd9fe15140`: 1 info - endpoint added [Operation history](https://skmtc.dev/endorlabs/apis/endor-labs-rest-api-reference/changes/v1/namespaces/:tenant_meta.namespace/queries/security-review/post.md) --- [API](https://skmtc.dev/endorlabs/apis/endor-labs-rest-api-reference.md) - [All operations](https://skmtc.dev/endorlabs/apis/endor-labs-rest-api-reference/llms.txt) - [OpenAPI document](https://skmtc.dev/endorlabs/apis/endor-labs-rest-api-reference/revisions/4acd9fe15140?raw)