---
title: "CreateRepository"
method: POST
path: "/v1/namespaces/{tenant_meta.namespace}/security-review-pull-requests"
tags: ["SecurityReviewPullRequestService"]
---

# CreateRepository

`POST /v1/namespaces/{tenant_meta.namespace}/security-review-pull-requests`

## Request

- Base URL: `https://api.endorlabs.com`
- URL: `https://api.endorlabs.com/v1/namespaces/{tenant_meta.namespace}/security-review-pull-requests`
- Auth: none declared

Creates a security review pull request.

The creation of the resource will be an upsert operation if the given spec.external_id and spec.platform_resource
are already available.

## Path parameters

- `tenant_meta.namespace` string, required

## Request body

- SecurityReviewPullRequestServiceCreateSecurityReviewPullRequestBody: SecurityReviewPullRequest represents a security review pull request.
  - `context` V1Context, required: Contexts keep objects from different scans separated.
    - `id` string, required: The context ID, such as a pull request ID or branch reference.
    - `tags` string[]: A list of tags applied to a context. Used primarily for CI and SBOM contexts.
    - `type` 'CONTEXT_TYPE_UNSPECIFIED' | 'CONTEXT_TYPE_MAIN' | 'CONTEXT_TYPE_EXTERNAL' | 'CONTEXT_TYPE_CI_RUN' | 'CONTEXT_TYPE_SBOM' | 'CONTEXT_TYPE_REF', required: - CONTEXT_TYPE_MAIN: Objects from a scan of the default branch. All objects in the oss namespace are in the main context. The context id is always "default". - CONTEXT_TYPE_EXTERNAL: Indicates that this object is a copy/temporary value of an object in another project. Used for same-tenant dependencies. In source code reference this is equivalent to "vendor" folders. Package versions in the external context are only scanned for call graphs. No other operations are performed on them. - CONTEXT_TYPE_CI_RUN: Objects from a PR scan. The context id is the PR UUID. Objects in this context are deleted after 30 days. - CONTEXT_TYPE_SBOM: Objects from an SBOM scan. The context id is the SBOM serial number or some other unique identifier. - CONTEXT_TYPE_REF: Objects from a scan of a specific branch. The context id is the branch reference name.
    - `will_be_deleted_at` string, date-time: Time that all objects in this context will be deleted. This field is deprecated and will be removed in the future. Please use the meta.will_be_deleted_at field instead.
  - `meta` V1Meta, required: Common fields for all Endor Labs resources.
    - `annotations` object: Annotations can be used to attach metadata to a resource message. Annotation values can be small or large, structured or unstructured, and may include characters not permitted by labels. The keys may contain alphanumerics, underscores (_), dots (.) and dashes (-). The values of an annotation must be 16384 bytes or smaller.
    - `create_time` string, date-time: Time the resource was created. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
    - `created_by` string: Name and authentication source of the user who created the object, for example, ewok@endor.ai@google@api-key.
    - `description` string: Resource description. Must be less than 1024 bytes.
    - `index_data` V1IndexData: IndexData is used to index the resource for search. It's an internal object.
      - `data` string[]
      - `search_score` number, float: search_score is the score of the resource for search. Internal use only.
      - `tenant` string
      - `will_be_deleted_at` string, date-time: Time that the resource will be deleted.
    - `kind` string: Resource kind, for example, HelloResponse. Auto-generated using the protobuf message proto.MessageName().Name().
    - `name` string, required: Resource name. Must be 63 characters or less.
    - `parent_kind` string: Parent object resource kind, for example, Project.
    - `parent_uuid` string: Parent object UUID.
    - `references` object: Map of objects referenced in a query API.
    - `tags` string[]: List of tags attached to the resource. Tags can be used to select objects and to find collections of objects that satisfy certain conditions. A tag must be 255 characters or less.
    - `update_time` string, date-time: Time the resource was last updated. Note: Updated on all create/patch/delete operations. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
    - `updated_by` string: Name and authentication source of the last user who updated the object, for example, vulnerabilityingestor@endor.ai@x509.
    - `upsert_time` string, date-time: Time the resource was last upserted. Note: create_time is only set the first time the resource is created. upsert_time is set every time the resource is upseted. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
    - `version` string: Message version.
  - `spec` V1SecurityReviewPullRequestSpec
    - `analysis_issues` SecurityReviewPullRequestSpecAnalysisIssue[]: Special cases that occurred during analysis but didn't prevent partial completion.
      - `errors` string[]: Error messages related to this issue.
      - `skipped_files` string[]: Files that were skipped due to this issue.
      - `summarized_files` string[]: Files that were grouped together and summarized due to this issue.
      - `type` 'ISSUE_TYPE_UNSPECIFIED' | 'ISSUE_TYPE_DIFF_TOO_LARGE' | 'ISSUE_TYPE_AI_ERROR' | 'ISSUE_TYPE_QUOTA_EXCEEDED' | 'ISSUE_TYPE_HIGH_DEMAND': - ISSUE_TYPE_DIFF_TOO_LARGE: Files were skipped due to diff size limits. - ISSUE_TYPE_AI_ERROR: AI agent encountered errors but analysis continued. - ISSUE_TYPE_QUOTA_EXCEEDED: Quota for the namespace was exceeded. - ISSUE_TYPE_HIGH_DEMAND: High demand on our AI agents.
    - `approvers` V1PlatformAccount[]: The approvers of the pull request. This is only populated if the pull request was merged.
      - `ingested_object` V1IngestedObject, required: Raw ingested object from a 3rd party source, along with any additional metadata we want to add to the object.
        - `ingestion_time` string, date-time, required: Time the object was last ingested.
        - `raw` object, required: Generic representation of the object.
        - `status` 'INGESTED_OBJECT_STATUS_UNSPECIFIED' | 'INGESTED_OBJECT_STATUS_FOUND' | 'INGESTED_OBJECT_STATUS_NOT_FOUND' | 'INGESTED_OBJECT_STATUS_LIGHT', required: - INGESTED_OBJECT_STATUS_LIGHT: Example: Use when a user exists because they are attached to a commit, but are not found on a direct lookup.
      - `meta` V1Meta, required: Common fields for all Endor Labs resources.
        - `annotations` object: Annotations can be used to attach metadata to a resource message. Annotation values can be small or large, structured or unstructured, and may include characters not permitted by labels. The keys may contain alphanumerics, underscores (_), dots (.) and dashes (-). The values of an annotation must be 16384 bytes or smaller.
        - `create_time` string, date-time: Time the resource was created. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
        - `created_by` string: Name and authentication source of the user who created the object, for example, ewok@endor.ai@google@api-key.
        - `description` string: Resource description. Must be less than 1024 bytes.
        - `index_data` V1IndexData: IndexData is used to index the resource for search. It's an internal object.
          - `data` string[]
          - `search_score` number, float: search_score is the score of the resource for search. Internal use only.
          - `tenant` string
          - `will_be_deleted_at` string, date-time: Time that the resource will be deleted.
        - `kind` string: Resource kind, for example, HelloResponse. Auto-generated using the protobuf message proto.MessageName().Name().
        - `name` string, required: Resource name. Must be 63 characters or less.
        - `parent_kind` string: Parent object resource kind, for example, Project.
        - `parent_uuid` string: Parent object UUID.
        - `references` object: Map of objects referenced in a query API.
        - `tags` string[]: List of tags attached to the resource. Tags can be used to select objects and to find collections of objects that satisfy certain conditions. A tag must be 255 characters or less.
        - `update_time` string, date-time: Time the resource was last updated. Note: Updated on all create/patch/delete operations. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
        - `updated_by` string: Name and authentication source of the last user who updated the object, for example, vulnerabilityingestor@endor.ai@x509.
        - `upsert_time` string, date-time: Time the resource was last upserted. Note: create_time is only set the first time the resource is created. upsert_time is set every time the resource is upseted. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
        - `version` string: Message version.
      - `spec` V1PlatformAccountSpec
        - `create_time` string, date-time: Create time of the platform account.
        - `email` string: The email of the platform account.
        - `external_id` string, required: The ID of the platform account in the orginal platform.
        - `name` string: The name of the platform account.
        - `platform_source` 'PLATFORM_SOURCE_UNSPECIFIED' | 'PLATFORM_SOURCE_GITHUB' | 'PLATFORM_SOURCE_GITLAB' | 'PLATFORM_SOURCE_GITSERVER' | 'PLATFORM_SOURCE_BITBUCKET' | 'PLATFORM_SOURCE_BINARY' | 'PLATFORM_SOURCE_HUGGING_FACE' | 'PLATFORM_SOURCE_AZURE' | 'PLATFORM_SOURCE_ARCHIVE' | 'PLATFORM_SOURCE_EXTERNAL_AI_SERVICE' | 'PLATFORM_SOURCE_GITHUB_ENTERPRISE', required: Type of source control platform a resource was discovered on.
        - `update_time` string, date-time: Update time of the platform account.
      - `tenant_meta` V1TenantMeta: Tenant related data for the tenant containing the resource.
        - `namespace` string, required: Namespaces are a way to organize organizational units into virtual groupings of resources. Namespaces must be a fully qualified name, for example, the child namespace of namespace "endor.prod" called "app" is called "endor.prod.app".
      - `uuid` string: The UUID of a platform account.
    - `categories` PullRequestSecurityReviewResultInfoSecurityReviewCategory[]: The categories of the security review pull request.
    - `code_changes` SpecCodeChanges, required
      - `added_lines` integer: The number of added lines in the security review pull request.
      - `description` string: The description of the code changes.
      - `file_changes` object: The file changes in the security review pull request. The key is the file path and the value is the file changes.
      - `removed_lines` integer: The number of removed lines in the security review pull request.
    - `findings_info` SpecFindingsInfo
      - `critical_findings_count` integer: Number of critical severity findings.
      - `high_findings_count` integer: Number of high severity findings.
      - `low_findings_count` integer: Number of low severity findings.
      - `medium_findings_count` integer: Number of medium severity findings.
    - `has_pr_description` boolean: Whether the pr has a description.
    - `is_latest_pr_scan` boolean: Whether the security review pull request is the latest pull request scan.
    - `level` 'SECURITY_REVIEW_LEVEL_UNSPECIFIED' | 'SECURITY_REVIEW_LEVEL_CRITICAL' | 'SECURITY_REVIEW_LEVEL_HIGH' | 'SECURITY_REVIEW_LEVEL_MEDIUM' | 'SECURITY_REVIEW_LEVEL_LOW', required: SecurityReviewLevel severity level. - SECURITY_REVIEW_LEVEL_CRITICAL: Critical Security Review. - SECURITY_REVIEW_LEVEL_HIGH: Very important Security Review. - SECURITY_REVIEW_LEVEL_MEDIUM: Important Security Review. - SECURITY_REVIEW_LEVEL_LOW: Low priority Security Review.
    - `project_uuid` string, required: The UUID of the project to which the security review pull request belongs.
    - `repository_pull_request_spec` V1RepositoryPullRequestSpec, required
      - `base_commit_hash` string: The base commit hash of the pull request.
      - `close_time` string, date-time: Time that the pull request was closed.
      - `contributor` V1PlatformAccount: PlatformAccount represents an account of a user to third-party site like GitHub/Gitlab or some package platform.
        - `ingested_object` V1IngestedObject, required: Raw ingested object from a 3rd party source, along with any additional metadata we want to add to the object.
          - `ingestion_time` string, date-time, required: Time the object was last ingested.
          - `raw` object, required: Generic representation of the object.
          - `status` 'INGESTED_OBJECT_STATUS_UNSPECIFIED' | 'INGESTED_OBJECT_STATUS_FOUND' | 'INGESTED_OBJECT_STATUS_NOT_FOUND' | 'INGESTED_OBJECT_STATUS_LIGHT', required: - INGESTED_OBJECT_STATUS_LIGHT: Example: Use when a user exists because they are attached to a commit, but are not found on a direct lookup.
        - `meta` V1Meta, required: Common fields for all Endor Labs resources.
          - `annotations` object: Annotations can be used to attach metadata to a resource message. Annotation values can be small or large, structured or unstructured, and may include characters not permitted by labels. The keys may contain alphanumerics, underscores (_), dots (.) and dashes (-). The values of an annotation must be 16384 bytes or smaller.
          - `create_time` string, date-time: Time the resource was created. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
          - `created_by` string: Name and authentication source of the user who created the object, for example, ewok@endor.ai@google@api-key.
          - `description` string: Resource description. Must be less than 1024 bytes.
          - `index_data` V1IndexData: IndexData is used to index the resource for search. It's an internal object.
            - `data` string[]
            - `search_score` number, float: search_score is the score of the resource for search. Internal use only.
            - `tenant` string
            - `will_be_deleted_at` string, date-time: Time that the resource will be deleted.
          - `kind` string: Resource kind, for example, HelloResponse. Auto-generated using the protobuf message proto.MessageName().Name().
          - `name` string, required: Resource name. Must be 63 characters or less.
          - `parent_kind` string: Parent object resource kind, for example, Project.
          - `parent_uuid` string: Parent object UUID.
          - `references` object: Map of objects referenced in a query API.
          - `tags` string[]: List of tags attached to the resource. Tags can be used to select objects and to find collections of objects that satisfy certain conditions. A tag must be 255 characters or less.
          - `update_time` string, date-time: Time the resource was last updated. Note: Updated on all create/patch/delete operations. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
          - `updated_by` string: Name and authentication source of the last user who updated the object, for example, vulnerabilityingestor@endor.ai@x509.
          - `upsert_time` string, date-time: Time the resource was last upserted. Note: create_time is only set the first time the resource is created. upsert_time is set every time the resource is upseted. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
          - `version` string: Message version.
        - `spec` V1PlatformAccountSpec
          - `create_time` string, date-time: Create time of the platform account.
          - `email` string: The email of the platform account.
          - `external_id` string, required: The ID of the platform account in the orginal platform.
          - `name` string: The name of the platform account.
          - `platform_source` 'PLATFORM_SOURCE_UNSPECIFIED' | 'PLATFORM_SOURCE_GITHUB' | 'PLATFORM_SOURCE_GITLAB' | 'PLATFORM_SOURCE_GITSERVER' | 'PLATFORM_SOURCE_BITBUCKET' | 'PLATFORM_SOURCE_BINARY' | 'PLATFORM_SOURCE_HUGGING_FACE' | 'PLATFORM_SOURCE_AZURE' | 'PLATFORM_SOURCE_ARCHIVE' | 'PLATFORM_SOURCE_EXTERNAL_AI_SERVICE' | 'PLATFORM_SOURCE_GITHUB_ENTERPRISE', required: Type of source control platform a resource was discovered on.
          - `update_time` string, date-time: Update time of the platform account.
        - `tenant_meta` V1TenantMeta: Tenant related data for the tenant containing the resource.
          - `namespace` string, required: Namespaces are a way to organize organizational units into virtual groupings of resources. Namespaces must be a fully qualified name, for example, the child namespace of namespace "endor.prod" called "app" is called "endor.prod.app".
        - `uuid` string: The UUID of a platform account.
      - `corrected_merge_commit_hash` string: The corrected merge commit hash of the pull request. This field is populated if the original merge_commit_hash is found to be incorrect while fetching check runs. It is calculated by take the commit_id from the "merged" event.
      - `create_time` string, date-time: Time that the pull request was created.
      - `external_id` string, required: The pull request ID in the platform from which it was ingested.
      - `head_commit_hash` string: The head commit hash of the pull request.
      - `is_draft` boolean: Whether the pull request is a draft.
      - `merge_commit_hash` string: The merge commit hash of the pull request.
      - `merge_time` string, date-time: Time that the pull request was merged.
      - `merged` boolean: Whether the PR is merged or not.
      - `merged_by_user` V1PlatformAccount: PlatformAccount represents an account of a user to third-party site like GitHub/Gitlab or some package platform.
        - `ingested_object` V1IngestedObject, required: Raw ingested object from a 3rd party source, along with any additional metadata we want to add to the object.
          - `ingestion_time` string, date-time, required: Time the object was last ingested.
          - `raw` object, required: Generic representation of the object.
          - `status` 'INGESTED_OBJECT_STATUS_UNSPECIFIED' | 'INGESTED_OBJECT_STATUS_FOUND' | 'INGESTED_OBJECT_STATUS_NOT_FOUND' | 'INGESTED_OBJECT_STATUS_LIGHT', required: - INGESTED_OBJECT_STATUS_LIGHT: Example: Use when a user exists because they are attached to a commit, but are not found on a direct lookup.
        - `meta` V1Meta, required: Common fields for all Endor Labs resources.
          - `annotations` object: Annotations can be used to attach metadata to a resource message. Annotation values can be small or large, structured or unstructured, and may include characters not permitted by labels. The keys may contain alphanumerics, underscores (_), dots (.) and dashes (-). The values of an annotation must be 16384 bytes or smaller.
          - `create_time` string, date-time: Time the resource was created. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
          - `created_by` string: Name and authentication source of the user who created the object, for example, ewok@endor.ai@google@api-key.
          - `description` string: Resource description. Must be less than 1024 bytes.
          - `index_data` V1IndexData: IndexData is used to index the resource for search. It's an internal object.
            - `data` string[]
            - `search_score` number, float: search_score is the score of the resource for search. Internal use only.
            - `tenant` string
            - `will_be_deleted_at` string, date-time: Time that the resource will be deleted.
          - `kind` string: Resource kind, for example, HelloResponse. Auto-generated using the protobuf message proto.MessageName().Name().
          - `name` string, required: Resource name. Must be 63 characters or less.
          - `parent_kind` string: Parent object resource kind, for example, Project.
          - `parent_uuid` string: Parent object UUID.
          - `references` object: Map of objects referenced in a query API.
          - `tags` string[]: List of tags attached to the resource. Tags can be used to select objects and to find collections of objects that satisfy certain conditions. A tag must be 255 characters or less.
          - `update_time` string, date-time: Time the resource was last updated. Note: Updated on all create/patch/delete operations. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
          - `updated_by` string: Name and authentication source of the last user who updated the object, for example, vulnerabilityingestor@endor.ai@x509.
          - `upsert_time` string, date-time: Time the resource was last upserted. Note: create_time is only set the first time the resource is created. upsert_time is set every time the resource is upseted. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
          - `version` string: Message version.
        - `spec` V1PlatformAccountSpec
          - `create_time` string, date-time: Create time of the platform account.
          - `email` string: The email of the platform account.
          - `external_id` string, required: The ID of the platform account in the orginal platform.
          - `name` string: The name of the platform account.
          - `platform_source` 'PLATFORM_SOURCE_UNSPECIFIED' | 'PLATFORM_SOURCE_GITHUB' | 'PLATFORM_SOURCE_GITLAB' | 'PLATFORM_SOURCE_GITSERVER' | 'PLATFORM_SOURCE_BITBUCKET' | 'PLATFORM_SOURCE_BINARY' | 'PLATFORM_SOURCE_HUGGING_FACE' | 'PLATFORM_SOURCE_AZURE' | 'PLATFORM_SOURCE_ARCHIVE' | 'PLATFORM_SOURCE_EXTERNAL_AI_SERVICE' | 'PLATFORM_SOURCE_GITHUB_ENTERPRISE', required: Type of source control platform a resource was discovered on.
          - `update_time` string, date-time: Update time of the platform account.
        - `tenant_meta` V1TenantMeta: Tenant related data for the tenant containing the resource.
          - `namespace` string, required: Namespaces are a way to organize organizational units into virtual groupings of resources. Namespaces must be a fully qualified name, for example, the child namespace of namespace "endor.prod" called "app" is called "endor.prod.app".
        - `uuid` string: The UUID of a platform account.
      - `name` string: The name of the pull request.
      - `number` integer: The pull request number.
      - `requested_reviewers` V1PlatformAccount[]: The reviewers of the pull request.
        - `ingested_object` V1IngestedObject, required: Raw ingested object from a 3rd party source, along with any additional metadata we want to add to the object.
          - `ingestion_time` string, date-time, required: Time the object was last ingested.
          - `raw` object, required: Generic representation of the object.
          - `status` 'INGESTED_OBJECT_STATUS_UNSPECIFIED' | 'INGESTED_OBJECT_STATUS_FOUND' | 'INGESTED_OBJECT_STATUS_NOT_FOUND' | 'INGESTED_OBJECT_STATUS_LIGHT', required: - INGESTED_OBJECT_STATUS_LIGHT: Example: Use when a user exists because they are attached to a commit, but are not found on a direct lookup.
        - `meta` V1Meta, required: Common fields for all Endor Labs resources.
          - `annotations` object: Annotations can be used to attach metadata to a resource message. Annotation values can be small or large, structured or unstructured, and may include characters not permitted by labels. The keys may contain alphanumerics, underscores (_), dots (.) and dashes (-). The values of an annotation must be 16384 bytes or smaller.
          - `create_time` string, date-time: Time the resource was created. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
          - `created_by` string: Name and authentication source of the user who created the object, for example, ewok@endor.ai@google@api-key.
          - `description` string: Resource description. Must be less than 1024 bytes.
          - `index_data` V1IndexData: IndexData is used to index the resource for search. It's an internal object.
            - `data` string[]
            - `search_score` number, float: search_score is the score of the resource for search. Internal use only.
            - `tenant` string
            - `will_be_deleted_at` string, date-time: Time that the resource will be deleted.
          - `kind` string: Resource kind, for example, HelloResponse. Auto-generated using the protobuf message proto.MessageName().Name().
          - `name` string, required: Resource name. Must be 63 characters or less.
          - `parent_kind` string: Parent object resource kind, for example, Project.
          - `parent_uuid` string: Parent object UUID.
          - `references` object: Map of objects referenced in a query API.
          - `tags` string[]: List of tags attached to the resource. Tags can be used to select objects and to find collections of objects that satisfy certain conditions. A tag must be 255 characters or less.
          - `update_time` string, date-time: Time the resource was last updated. Note: Updated on all create/patch/delete operations. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
          - `updated_by` string: Name and authentication source of the last user who updated the object, for example, vulnerabilityingestor@endor.ai@x509.
          - `upsert_time` string, date-time: Time the resource was last upserted. Note: create_time is only set the first time the resource is created. upsert_time is set every time the resource is upseted. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
          - `version` string: Message version.
        - `spec` V1PlatformAccountSpec
          - `create_time` string, date-time: Create time of the platform account.
          - `email` string: The email of the platform account.
          - `external_id` string, required: The ID of the platform account in the orginal platform.
          - `name` string: The name of the platform account.
          - `platform_source` 'PLATFORM_SOURCE_UNSPECIFIED' | 'PLATFORM_SOURCE_GITHUB' | 'PLATFORM_SOURCE_GITLAB' | 'PLATFORM_SOURCE_GITSERVER' | 'PLATFORM_SOURCE_BITBUCKET' | 'PLATFORM_SOURCE_BINARY' | 'PLATFORM_SOURCE_HUGGING_FACE' | 'PLATFORM_SOURCE_AZURE' | 'PLATFORM_SOURCE_ARCHIVE' | 'PLATFORM_SOURCE_EXTERNAL_AI_SERVICE' | 'PLATFORM_SOURCE_GITHUB_ENTERPRISE', required: Type of source control platform a resource was discovered on.
          - `update_time` string, date-time: Update time of the platform account.
        - `tenant_meta` V1TenantMeta: Tenant related data for the tenant containing the resource.
          - `namespace` string, required: Namespaces are a way to organize organizational units into virtual groupings of resources. Namespaces must be a fully qualified name, for example, the child namespace of namespace "endor.prod" called "app" is called "endor.prod.app".
        - `uuid` string: The UUID of a platform account.
      - `state` string: State of the pull request.
      - `summary` string: The summary of the pull request.
      - `update_time` string, date-time: Time that the pull request was updated.
    - `security_summary` string, required: The description of the security review pull request.
  - `tenant_meta` object: Security review pull requests are associated with a tenant.
  - `uuid` string: The UUID of the security review pull request.

## Response `200`

A successful response.

- V1SecurityReviewPullRequest: SecurityReviewPullRequest represents a security review pull request.
  - `context` V1Context, required: Contexts keep objects from different scans separated.
    - `id` string, required: The context ID, such as a pull request ID or branch reference.
    - `tags` string[]: A list of tags applied to a context. Used primarily for CI and SBOM contexts.
    - `type` 'CONTEXT_TYPE_UNSPECIFIED' | 'CONTEXT_TYPE_MAIN' | 'CONTEXT_TYPE_EXTERNAL' | 'CONTEXT_TYPE_CI_RUN' | 'CONTEXT_TYPE_SBOM' | 'CONTEXT_TYPE_REF', required: - CONTEXT_TYPE_MAIN: Objects from a scan of the default branch. All objects in the oss namespace are in the main context. The context id is always "default". - CONTEXT_TYPE_EXTERNAL: Indicates that this object is a copy/temporary value of an object in another project. Used for same-tenant dependencies. In source code reference this is equivalent to "vendor" folders. Package versions in the external context are only scanned for call graphs. No other operations are performed on them. - CONTEXT_TYPE_CI_RUN: Objects from a PR scan. The context id is the PR UUID. Objects in this context are deleted after 30 days. - CONTEXT_TYPE_SBOM: Objects from an SBOM scan. The context id is the SBOM serial number or some other unique identifier. - CONTEXT_TYPE_REF: Objects from a scan of a specific branch. The context id is the branch reference name.
    - `will_be_deleted_at` string, date-time: Time that all objects in this context will be deleted. This field is deprecated and will be removed in the future. Please use the meta.will_be_deleted_at field instead.
  - `meta` V1Meta, required: Common fields for all Endor Labs resources.
    - `annotations` object: Annotations can be used to attach metadata to a resource message. Annotation values can be small or large, structured or unstructured, and may include characters not permitted by labels. The keys may contain alphanumerics, underscores (_), dots (.) and dashes (-). The values of an annotation must be 16384 bytes or smaller.
    - `create_time` string, date-time: Time the resource was created. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
    - `created_by` string: Name and authentication source of the user who created the object, for example, ewok@endor.ai@google@api-key.
    - `description` string: Resource description. Must be less than 1024 bytes.
    - `index_data` V1IndexData: IndexData is used to index the resource for search. It's an internal object.
      - `data` string[]
      - `search_score` number, float: search_score is the score of the resource for search. Internal use only.
      - `tenant` string
      - `will_be_deleted_at` string, date-time: Time that the resource will be deleted.
    - `kind` string: Resource kind, for example, HelloResponse. Auto-generated using the protobuf message proto.MessageName().Name().
    - `name` string, required: Resource name. Must be 63 characters or less.
    - `parent_kind` string: Parent object resource kind, for example, Project.
    - `parent_uuid` string: Parent object UUID.
    - `references` object: Map of objects referenced in a query API.
    - `tags` string[]: List of tags attached to the resource. Tags can be used to select objects and to find collections of objects that satisfy certain conditions. A tag must be 255 characters or less.
    - `update_time` string, date-time: Time the resource was last updated. Note: Updated on all create/patch/delete operations. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
    - `updated_by` string: Name and authentication source of the last user who updated the object, for example, vulnerabilityingestor@endor.ai@x509.
    - `upsert_time` string, date-time: Time the resource was last upserted. Note: create_time is only set the first time the resource is created. upsert_time is set every time the resource is upseted. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
    - `version` string: Message version.
  - `spec` V1SecurityReviewPullRequestSpec
    - `analysis_issues` SecurityReviewPullRequestSpecAnalysisIssue[]: Special cases that occurred during analysis but didn't prevent partial completion.
      - `errors` string[]: Error messages related to this issue.
      - `skipped_files` string[]: Files that were skipped due to this issue.
      - `summarized_files` string[]: Files that were grouped together and summarized due to this issue.
      - `type` 'ISSUE_TYPE_UNSPECIFIED' | 'ISSUE_TYPE_DIFF_TOO_LARGE' | 'ISSUE_TYPE_AI_ERROR' | 'ISSUE_TYPE_QUOTA_EXCEEDED' | 'ISSUE_TYPE_HIGH_DEMAND': - ISSUE_TYPE_DIFF_TOO_LARGE: Files were skipped due to diff size limits. - ISSUE_TYPE_AI_ERROR: AI agent encountered errors but analysis continued. - ISSUE_TYPE_QUOTA_EXCEEDED: Quota for the namespace was exceeded. - ISSUE_TYPE_HIGH_DEMAND: High demand on our AI agents.
    - `approvers` V1PlatformAccount[]: The approvers of the pull request. This is only populated if the pull request was merged.
      - `ingested_object` V1IngestedObject, required: Raw ingested object from a 3rd party source, along with any additional metadata we want to add to the object.
        - `ingestion_time` string, date-time, required: Time the object was last ingested.
        - `raw` object, required: Generic representation of the object.
        - `status` 'INGESTED_OBJECT_STATUS_UNSPECIFIED' | 'INGESTED_OBJECT_STATUS_FOUND' | 'INGESTED_OBJECT_STATUS_NOT_FOUND' | 'INGESTED_OBJECT_STATUS_LIGHT', required: - INGESTED_OBJECT_STATUS_LIGHT: Example: Use when a user exists because they are attached to a commit, but are not found on a direct lookup.
      - `meta` V1Meta, required: Common fields for all Endor Labs resources.
        - `annotations` object: Annotations can be used to attach metadata to a resource message. Annotation values can be small or large, structured or unstructured, and may include characters not permitted by labels. The keys may contain alphanumerics, underscores (_), dots (.) and dashes (-). The values of an annotation must be 16384 bytes or smaller.
        - `create_time` string, date-time: Time the resource was created. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
        - `created_by` string: Name and authentication source of the user who created the object, for example, ewok@endor.ai@google@api-key.
        - `description` string: Resource description. Must be less than 1024 bytes.
        - `index_data` V1IndexData: IndexData is used to index the resource for search. It's an internal object.
          - `data` string[]
          - `search_score` number, float: search_score is the score of the resource for search. Internal use only.
          - `tenant` string
          - `will_be_deleted_at` string, date-time: Time that the resource will be deleted.
        - `kind` string: Resource kind, for example, HelloResponse. Auto-generated using the protobuf message proto.MessageName().Name().
        - `name` string, required: Resource name. Must be 63 characters or less.
        - `parent_kind` string: Parent object resource kind, for example, Project.
        - `parent_uuid` string: Parent object UUID.
        - `references` object: Map of objects referenced in a query API.
        - `tags` string[]: List of tags attached to the resource. Tags can be used to select objects and to find collections of objects that satisfy certain conditions. A tag must be 255 characters or less.
        - `update_time` string, date-time: Time the resource was last updated. Note: Updated on all create/patch/delete operations. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
        - `updated_by` string: Name and authentication source of the last user who updated the object, for example, vulnerabilityingestor@endor.ai@x509.
        - `upsert_time` string, date-time: Time the resource was last upserted. Note: create_time is only set the first time the resource is created. upsert_time is set every time the resource is upseted. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
        - `version` string: Message version.
      - `spec` V1PlatformAccountSpec
        - `create_time` string, date-time: Create time of the platform account.
        - `email` string: The email of the platform account.
        - `external_id` string, required: The ID of the platform account in the orginal platform.
        - `name` string: The name of the platform account.
        - `platform_source` 'PLATFORM_SOURCE_UNSPECIFIED' | 'PLATFORM_SOURCE_GITHUB' | 'PLATFORM_SOURCE_GITLAB' | 'PLATFORM_SOURCE_GITSERVER' | 'PLATFORM_SOURCE_BITBUCKET' | 'PLATFORM_SOURCE_BINARY' | 'PLATFORM_SOURCE_HUGGING_FACE' | 'PLATFORM_SOURCE_AZURE' | 'PLATFORM_SOURCE_ARCHIVE' | 'PLATFORM_SOURCE_EXTERNAL_AI_SERVICE' | 'PLATFORM_SOURCE_GITHUB_ENTERPRISE', required: Type of source control platform a resource was discovered on.
        - `update_time` string, date-time: Update time of the platform account.
      - `tenant_meta` V1TenantMeta: Tenant related data for the tenant containing the resource.
        - `namespace` string, required: Namespaces are a way to organize organizational units into virtual groupings of resources. Namespaces must be a fully qualified name, for example, the child namespace of namespace "endor.prod" called "app" is called "endor.prod.app".
      - `uuid` string: The UUID of a platform account.
    - `categories` PullRequestSecurityReviewResultInfoSecurityReviewCategory[]: The categories of the security review pull request.
    - `code_changes` SpecCodeChanges, required
      - `added_lines` integer: The number of added lines in the security review pull request.
      - `description` string: The description of the code changes.
      - `file_changes` object: The file changes in the security review pull request. The key is the file path and the value is the file changes.
      - `removed_lines` integer: The number of removed lines in the security review pull request.
    - `findings_info` SpecFindingsInfo
      - `critical_findings_count` integer: Number of critical severity findings.
      - `high_findings_count` integer: Number of high severity findings.
      - `low_findings_count` integer: Number of low severity findings.
      - `medium_findings_count` integer: Number of medium severity findings.
    - `has_pr_description` boolean: Whether the pr has a description.
    - `is_latest_pr_scan` boolean: Whether the security review pull request is the latest pull request scan.
    - `level` 'SECURITY_REVIEW_LEVEL_UNSPECIFIED' | 'SECURITY_REVIEW_LEVEL_CRITICAL' | 'SECURITY_REVIEW_LEVEL_HIGH' | 'SECURITY_REVIEW_LEVEL_MEDIUM' | 'SECURITY_REVIEW_LEVEL_LOW', required: SecurityReviewLevel severity level. - SECURITY_REVIEW_LEVEL_CRITICAL: Critical Security Review. - SECURITY_REVIEW_LEVEL_HIGH: Very important Security Review. - SECURITY_REVIEW_LEVEL_MEDIUM: Important Security Review. - SECURITY_REVIEW_LEVEL_LOW: Low priority Security Review.
    - `project_uuid` string, required: The UUID of the project to which the security review pull request belongs.
    - `repository_pull_request_spec` V1RepositoryPullRequestSpec, required
      - `base_commit_hash` string: The base commit hash of the pull request.
      - `close_time` string, date-time: Time that the pull request was closed.
      - `contributor` V1PlatformAccount: PlatformAccount represents an account of a user to third-party site like GitHub/Gitlab or some package platform.
        - `ingested_object` V1IngestedObject, required: Raw ingested object from a 3rd party source, along with any additional metadata we want to add to the object.
          - `ingestion_time` string, date-time, required: Time the object was last ingested.
          - `raw` object, required: Generic representation of the object.
          - `status` 'INGESTED_OBJECT_STATUS_UNSPECIFIED' | 'INGESTED_OBJECT_STATUS_FOUND' | 'INGESTED_OBJECT_STATUS_NOT_FOUND' | 'INGESTED_OBJECT_STATUS_LIGHT', required: - INGESTED_OBJECT_STATUS_LIGHT: Example: Use when a user exists because they are attached to a commit, but are not found on a direct lookup.
        - `meta` V1Meta, required: Common fields for all Endor Labs resources.
          - `annotations` object: Annotations can be used to attach metadata to a resource message. Annotation values can be small or large, structured or unstructured, and may include characters not permitted by labels. The keys may contain alphanumerics, underscores (_), dots (.) and dashes (-). The values of an annotation must be 16384 bytes or smaller.
          - `create_time` string, date-time: Time the resource was created. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
          - `created_by` string: Name and authentication source of the user who created the object, for example, ewok@endor.ai@google@api-key.
          - `description` string: Resource description. Must be less than 1024 bytes.
          - `index_data` V1IndexData: IndexData is used to index the resource for search. It's an internal object.
            - `data` string[]
            - `search_score` number, float: search_score is the score of the resource for search. Internal use only.
            - `tenant` string
            - `will_be_deleted_at` string, date-time: Time that the resource will be deleted.
          - `kind` string: Resource kind, for example, HelloResponse. Auto-generated using the protobuf message proto.MessageName().Name().
          - `name` string, required: Resource name. Must be 63 characters or less.
          - `parent_kind` string: Parent object resource kind, for example, Project.
          - `parent_uuid` string: Parent object UUID.
          - `references` object: Map of objects referenced in a query API.
          - `tags` string[]: List of tags attached to the resource. Tags can be used to select objects and to find collections of objects that satisfy certain conditions. A tag must be 255 characters or less.
          - `update_time` string, date-time: Time the resource was last updated. Note: Updated on all create/patch/delete operations. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
          - `updated_by` string: Name and authentication source of the last user who updated the object, for example, vulnerabilityingestor@endor.ai@x509.
          - `upsert_time` string, date-time: Time the resource was last upserted. Note: create_time is only set the first time the resource is created. upsert_time is set every time the resource is upseted. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
          - `version` string: Message version.
        - `spec` V1PlatformAccountSpec
          - `create_time` string, date-time: Create time of the platform account.
          - `email` string: The email of the platform account.
          - `external_id` string, required: The ID of the platform account in the orginal platform.
          - `name` string: The name of the platform account.
          - `platform_source` 'PLATFORM_SOURCE_UNSPECIFIED' | 'PLATFORM_SOURCE_GITHUB' | 'PLATFORM_SOURCE_GITLAB' | 'PLATFORM_SOURCE_GITSERVER' | 'PLATFORM_SOURCE_BITBUCKET' | 'PLATFORM_SOURCE_BINARY' | 'PLATFORM_SOURCE_HUGGING_FACE' | 'PLATFORM_SOURCE_AZURE' | 'PLATFORM_SOURCE_ARCHIVE' | 'PLATFORM_SOURCE_EXTERNAL_AI_SERVICE' | 'PLATFORM_SOURCE_GITHUB_ENTERPRISE', required: Type of source control platform a resource was discovered on.
          - `update_time` string, date-time: Update time of the platform account.
        - `tenant_meta` V1TenantMeta: Tenant related data for the tenant containing the resource.
          - `namespace` string, required: Namespaces are a way to organize organizational units into virtual groupings of resources. Namespaces must be a fully qualified name, for example, the child namespace of namespace "endor.prod" called "app" is called "endor.prod.app".
        - `uuid` string: The UUID of a platform account.
      - `corrected_merge_commit_hash` string: The corrected merge commit hash of the pull request. This field is populated if the original merge_commit_hash is found to be incorrect while fetching check runs. It is calculated by take the commit_id from the "merged" event.
      - `create_time` string, date-time: Time that the pull request was created.
      - `external_id` string, required: The pull request ID in the platform from which it was ingested.
      - `head_commit_hash` string: The head commit hash of the pull request.
      - `is_draft` boolean: Whether the pull request is a draft.
      - `merge_commit_hash` string: The merge commit hash of the pull request.
      - `merge_time` string, date-time: Time that the pull request was merged.
      - `merged` boolean: Whether the PR is merged or not.
      - `merged_by_user` V1PlatformAccount: PlatformAccount represents an account of a user to third-party site like GitHub/Gitlab or some package platform.
        - `ingested_object` V1IngestedObject, required: Raw ingested object from a 3rd party source, along with any additional metadata we want to add to the object.
          - `ingestion_time` string, date-time, required: Time the object was last ingested.
          - `raw` object, required: Generic representation of the object.
          - `status` 'INGESTED_OBJECT_STATUS_UNSPECIFIED' | 'INGESTED_OBJECT_STATUS_FOUND' | 'INGESTED_OBJECT_STATUS_NOT_FOUND' | 'INGESTED_OBJECT_STATUS_LIGHT', required: - INGESTED_OBJECT_STATUS_LIGHT: Example: Use when a user exists because they are attached to a commit, but are not found on a direct lookup.
        - `meta` V1Meta, required: Common fields for all Endor Labs resources.
          - `annotations` object: Annotations can be used to attach metadata to a resource message. Annotation values can be small or large, structured or unstructured, and may include characters not permitted by labels. The keys may contain alphanumerics, underscores (_), dots (.) and dashes (-). The values of an annotation must be 16384 bytes or smaller.
          - `create_time` string, date-time: Time the resource was created. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
          - `created_by` string: Name and authentication source of the user who created the object, for example, ewok@endor.ai@google@api-key.
          - `description` string: Resource description. Must be less than 1024 bytes.
          - `index_data` V1IndexData: IndexData is used to index the resource for search. It's an internal object.
            - `data` string[]
            - `search_score` number, float: search_score is the score of the resource for search. Internal use only.
            - `tenant` string
            - `will_be_deleted_at` string, date-time: Time that the resource will be deleted.
          - `kind` string: Resource kind, for example, HelloResponse. Auto-generated using the protobuf message proto.MessageName().Name().
          - `name` string, required: Resource name. Must be 63 characters or less.
          - `parent_kind` string: Parent object resource kind, for example, Project.
          - `parent_uuid` string: Parent object UUID.
          - `references` object: Map of objects referenced in a query API.
          - `tags` string[]: List of tags attached to the resource. Tags can be used to select objects and to find collections of objects that satisfy certain conditions. A tag must be 255 characters or less.
          - `update_time` string, date-time: Time the resource was last updated. Note: Updated on all create/patch/delete operations. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
          - `updated_by` string: Name and authentication source of the last user who updated the object, for example, vulnerabilityingestor@endor.ai@x509.
          - `upsert_time` string, date-time: Time the resource was last upserted. Note: create_time is only set the first time the resource is created. upsert_time is set every time the resource is upseted. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
          - `version` string: Message version.
        - `spec` V1PlatformAccountSpec
          - `create_time` string, date-time: Create time of the platform account.
          - `email` string: The email of the platform account.
          - `external_id` string, required: The ID of the platform account in the orginal platform.
          - `name` string: The name of the platform account.
          - `platform_source` 'PLATFORM_SOURCE_UNSPECIFIED' | 'PLATFORM_SOURCE_GITHUB' | 'PLATFORM_SOURCE_GITLAB' | 'PLATFORM_SOURCE_GITSERVER' | 'PLATFORM_SOURCE_BITBUCKET' | 'PLATFORM_SOURCE_BINARY' | 'PLATFORM_SOURCE_HUGGING_FACE' | 'PLATFORM_SOURCE_AZURE' | 'PLATFORM_SOURCE_ARCHIVE' | 'PLATFORM_SOURCE_EXTERNAL_AI_SERVICE' | 'PLATFORM_SOURCE_GITHUB_ENTERPRISE', required: Type of source control platform a resource was discovered on.
          - `update_time` string, date-time: Update time of the platform account.
        - `tenant_meta` V1TenantMeta: Tenant related data for the tenant containing the resource.
          - `namespace` string, required: Namespaces are a way to organize organizational units into virtual groupings of resources. Namespaces must be a fully qualified name, for example, the child namespace of namespace "endor.prod" called "app" is called "endor.prod.app".
        - `uuid` string: The UUID of a platform account.
      - `name` string: The name of the pull request.
      - `number` integer: The pull request number.
      - `requested_reviewers` V1PlatformAccount[]: The reviewers of the pull request.
        - `ingested_object` V1IngestedObject, required: Raw ingested object from a 3rd party source, along with any additional metadata we want to add to the object.
          - `ingestion_time` string, date-time, required: Time the object was last ingested.
          - `raw` object, required: Generic representation of the object.
          - `status` 'INGESTED_OBJECT_STATUS_UNSPECIFIED' | 'INGESTED_OBJECT_STATUS_FOUND' | 'INGESTED_OBJECT_STATUS_NOT_FOUND' | 'INGESTED_OBJECT_STATUS_LIGHT', required: - INGESTED_OBJECT_STATUS_LIGHT: Example: Use when a user exists because they are attached to a commit, but are not found on a direct lookup.
        - `meta` V1Meta, required: Common fields for all Endor Labs resources.
          - `annotations` object: Annotations can be used to attach metadata to a resource message. Annotation values can be small or large, structured or unstructured, and may include characters not permitted by labels. The keys may contain alphanumerics, underscores (_), dots (.) and dashes (-). The values of an annotation must be 16384 bytes or smaller.
          - `create_time` string, date-time: Time the resource was created. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
          - `created_by` string: Name and authentication source of the user who created the object, for example, ewok@endor.ai@google@api-key.
          - `description` string: Resource description. Must be less than 1024 bytes.
          - `index_data` V1IndexData: IndexData is used to index the resource for search. It's an internal object.
            - `data` string[]
            - `search_score` number, float: search_score is the score of the resource for search. Internal use only.
            - `tenant` string
            - `will_be_deleted_at` string, date-time: Time that the resource will be deleted.
          - `kind` string: Resource kind, for example, HelloResponse. Auto-generated using the protobuf message proto.MessageName().Name().
          - `name` string, required: Resource name. Must be 63 characters or less.
          - `parent_kind` string: Parent object resource kind, for example, Project.
          - `parent_uuid` string: Parent object UUID.
          - `references` object: Map of objects referenced in a query API.
          - `tags` string[]: List of tags attached to the resource. Tags can be used to select objects and to find collections of objects that satisfy certain conditions. A tag must be 255 characters or less.
          - `update_time` string, date-time: Time the resource was last updated. Note: Updated on all create/patch/delete operations. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
          - `updated_by` string: Name and authentication source of the last user who updated the object, for example, vulnerabilityingestor@endor.ai@x509.
          - `upsert_time` string, date-time: Time the resource was last upserted. Note: create_time is only set the first time the resource is created. upsert_time is set every time the resource is upseted. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt.
          - `version` string: Message version.
        - `spec` V1PlatformAccountSpec
          - `create_time` string, date-time: Create time of the platform account.
          - `email` string: The email of the platform account.
          - `external_id` string, required: The ID of the platform account in the orginal platform.
          - `name` string: The name of the platform account.
          - `platform_source` 'PLATFORM_SOURCE_UNSPECIFIED' | 'PLATFORM_SOURCE_GITHUB' | 'PLATFORM_SOURCE_GITLAB' | 'PLATFORM_SOURCE_GITSERVER' | 'PLATFORM_SOURCE_BITBUCKET' | 'PLATFORM_SOURCE_BINARY' | 'PLATFORM_SOURCE_HUGGING_FACE' | 'PLATFORM_SOURCE_AZURE' | 'PLATFORM_SOURCE_ARCHIVE' | 'PLATFORM_SOURCE_EXTERNAL_AI_SERVICE' | 'PLATFORM_SOURCE_GITHUB_ENTERPRISE', required: Type of source control platform a resource was discovered on.
          - `update_time` string, date-time: Update time of the platform account.
        - `tenant_meta` V1TenantMeta: Tenant related data for the tenant containing the resource.
          - `namespace` string, required: Namespaces are a way to organize organizational units into virtual groupings of resources. Namespaces must be a fully qualified name, for example, the child namespace of namespace "endor.prod" called "app" is called "endor.prod.app".
        - `uuid` string: The UUID of a platform account.
      - `state` string: State of the pull request.
      - `summary` string: The summary of the pull request.
      - `update_time` string, date-time: Time that the pull request was updated.
    - `security_summary` string, required: The description of the security review pull request.
  - `tenant_meta` V1TenantMeta: Tenant related data for the tenant containing the resource.
    - `namespace` string, required: Namespaces are a way to organize organizational units into virtual groupings of resources. Namespaces must be a fully qualified name, for example, the child namespace of namespace "endor.prod" called "app" is called "endor.prod.app".
  - `uuid` string: The UUID of the security review pull request.

## Other responses

- `default`: An unexpected error response.

## Changes

- **2026-11-03** `4acd9fe15140`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/endorlabs/apis/endor-labs-rest-api-reference/changes/v1/namespaces/:tenant_meta.namespace/security-review-pull-requests/post.md)

---

[API](https://skmtc.dev/endorlabs/apis/endor-labs-rest-api-reference.md) - [All operations](https://skmtc.dev/endorlabs/apis/endor-labs-rest-api-reference/llms.txt) - [OpenAPI document](https://skmtc.dev/endorlabs/apis/endor-labs-rest-api-reference/revisions/4acd9fe15140?raw)