---
title: "Get Workspace Security"
method: GET
path: "/workspaces/{workspace_id}/security"
tags: ["security"]
---

# Get Workspace Security

`GET /workspaces/{workspace_id}/security`

Workspace-wide security posture (Teams+): per-repo scan freshness,
worst open vulnerabilities by priority, live-secrets-anywhere, and
license-risk counts. Pure aggregation over the per-repo scan tables —
each repo contributes its latest ready snapshot.

## Path parameters

- `workspace_id` string, required

## Response `200`

Successful Response

- WorkspaceSecurityRollup
  - `workspace_id` string, required
  - `repos` WorkspaceRepoSecurity[]
    - `repo_id` string, required
    - `repo_name` string, nullable
    - `short_id` string, nullable
    - `scan_state` 'no_snapshot' | 'not_available' | 'queued' | 'scanning' | 'ready' | 'failed', required
    - `scanned_at` string, nullable
    - `dep_count` integer, nullable
    - `open_vuln_count` integer
    - `critical_open` integer
    - `high_open` integer
    - `kev_open` integer
    - `live_secret_count` integer
  - `top_vulnerabilities` RollupVulnerability[]
    - `repo_id` string, required
    - `repo_name` string, nullable
    - `short_id` string, nullable
    - `osv_id` string, required
    - `aliases` string[]
    - `package` string, nullable
    - `severity_label` string, nullable
    - `kev` boolean
    - `epss` number, nullable
    - `triage` string, nullable
    - `fixed_version` string, nullable
    - `priority_score` number, nullable
  - `severity_rollup` object
  - `license_rollup` object
  - `live_secret_count` integer
  - `any_live_secrets` boolean

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.dev/repowise/apis/repowise-hosted-api.md) · [All operations](https://skmtc.dev/repowise/apis/repowise-hosted-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/repowise/repowise-hosted-api/revisions/1e57283a9737/schema)