---
title: "Get Compliance Report"
method: GET
path: "/repos/{repo_id}/security/compliance"
tags: ["security"]
---

# Get Compliance Report

`GET /repos/{repo_id}/security/compliance`

Control-coverage report over the repo's current security findings.
Honest framing is in-band: the response carries a disclaimer that this
is not an audit or certification.

## Path parameters

- `repo_id` string, required

## Query parameters

- `framework` string, required — pci_dss | soc2

## Response `200`

Successful Response

- ComplianceReport — Control coverage signals from automated findings — explicitly NOT an audit or certification (the disclaimer ships in-band).
  - `framework` string, required
  - `framework_label` string, required
  - `disclaimer` string, required
  - `generated_at` string, required
  - `repo_id` string, required
  - `repo_name` string, nullable
  - `snapshot_id` string, required
  - `controls` ComplianceControl[]
    - `id` string, required
    - `title` string, required
    - `requirement` string, required
    - `status` 'satisfied' | 'at_risk' | 'gap' | 'manual', required
    - `summary` string, required
    - `evidence` object
    - `guidance` string, required
  - `rollup` object

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.dev/repowise/apis/repowise-hosted-api.md) · [All operations](https://skmtc.dev/repowise/apis/repowise-hosted-api/llms.txt) · [OpenAPI document](https://skmtc.dev/repowise/apis/repowise-hosted-api/revisions/ab200f4d1489?raw)