--- title: "Get Organization Security Policy" method: GET path: "/orgs/{org_slug}/settings/security-policy" tags: ["security-policy"] --- # Get Organization Security Policy `GET /orgs/{org_slug}/settings/security-policy` Retrieve the security policy of an organization. This endpoint consumes 1 unit of your quota. This endpoint requires the following org token scopes: - security-policy:read ## Path parameters - `org_slug` string, required ## Query parameters - `custom_rules_only` boolean ## Response `200` Retrieved security policy details - object - `securityPolicyRules` object - `gptSecurity` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for gptSecurity issues. - `gptAnomaly` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for gptAnomaly issues. - `gptMalware` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for gptMalware issues. - `filesystemAccess` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for filesystemAccess issues. - `networkAccess` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for networkAccess issues. - `shellAccess` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for shellAccess issues. - `debugAccess` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for debugAccess issues. - `chromePermission` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for chromePermission issues. - `chromeHostPermission` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for chromeHostPermission issues. - `chromeWildcardHostPermission` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for chromeWildcardHostPermission issues. - `chromeContentScript` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for chromeContentScript issues. - `criticalCVE` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for criticalCVE issues. - `cve` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for cve issues. - `mediumCVE` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for mediumCVE issues. - `mildCVE` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for mildCVE issues. - `emptyPackage` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for emptyPackage issues. - `trivialPackage` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for trivialPackage issues. - `noREADME` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for noREADME issues. - `missingLockfile` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for missingLockfile issues. - `oversizedManifest` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for oversizedManifest issues. - `shrinkwrap` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for shrinkwrap issues. - `tooManyFiles` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for tooManyFiles issues. - `generic` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for generic issues. - `ghaArgToSink` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for ghaArgToSink issues. - `ghaEnvToSink` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for ghaEnvToSink issues. - `ghaContextToSink` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for ghaContextToSink issues. - `ghaArgToOutput` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for ghaArgToOutput issues. - `ghaArgToEnv` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for ghaArgToEnv issues. - `ghaContextToOutput` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for ghaContextToOutput issues. - `ghaContextToEnv` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for ghaContextToEnv issues. - `recentlyPublished` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for recentlyPublished issues. - `licenseSpdxDisj` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for licenseSpdxDisj issues. - `unsafeCopyright` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for unsafeCopyright issues. - `licenseChange` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for licenseChange issues. - `nonOSILicense` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for nonOSILicense issues. - `deprecatedLicense` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for deprecatedLicense issues. - `missingLicense` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for missingLicense issues. - `nonSPDXLicense` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for nonSPDXLicense issues. - `unclearLicense` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for unclearLicense issues. - `mixedLicense` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for mixedLicense issues. - `notice` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for notice issues. - `modifiedLicense` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for modifiedLicense issues. - `modifiedException` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for modifiedException issues. - `licenseException` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for licenseException issues. - `deprecatedException` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for deprecatedException issues. - `miscLicenseIssues` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for miscLicenseIssues issues. - `unidentifiedLicense` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for unidentifiedLicense issues. - `noLicenseFound` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for noLicenseFound issues. - `explicitlyUnlicensedItem` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for explicitlyUnlicensedItem issues. - `copyleftLicense` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for copyleftLicense issues. - `nonpermissiveLicense` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for nonpermissiveLicense issues. - `ambiguousClassifier` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for ambiguousClassifier issues. - `invalidPackageJSON` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for invalidPackageJSON issues. - `httpDependency` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for httpDependency issues. - `gitDependency` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for gitDependency issues. - `gitHubDependency` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for gitHubDependency issues. - `fileDependency` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for fileDependency issues. - `noTests` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for noTests issues. - `noRepository` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for noRepository issues. - `badSemver` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for badSemver issues. - `badSemverDependency` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for badSemverDependency issues. - `noV1` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for noV1 issues. - `noWebsite` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for noWebsite issues. - `noBugTracker` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for noBugTracker issues. - `noAuthorData` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for noAuthorData issues. - `typeModuleCompatibility` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for typeModuleCompatibility issues. - `floatingDependency` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for floatingDependency issues. - `manifestConfusion` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for manifestConfusion issues. - `malware` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for malware issues. - `telemetry` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for telemetry issues. - `troll` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for troll issues. - `pendingScan` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for pendingScan issues. - `deprecated` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for deprecated issues. - `chronoAnomaly` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for chronoAnomaly issues. - `compromisedSSHKey` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for compromisedSSHKey issues. - `semverAnomaly` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for semverAnomaly issues. - `newAuthor` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for newAuthor issues. - `unstableOwnership` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for unstableOwnership issues. - `missingAuthor` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for missingAuthor issues. - `unmaintained` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for unmaintained issues. - `unpublished` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for unpublished issues. - `majorRefactor` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for majorRefactor issues. - `missingTarball` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for missingTarball issues. - `suspiciousStarActivity` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for suspiciousStarActivity issues. - `notFound` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for notFound issues. - `unpopularPackage` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for unpopularPackage issues. - `policy` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for policy issues. - `skillAutonomyAbuse` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for skillAutonomyAbuse issues. - `skillCommandInjection` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for skillCommandInjection issues. - `skillDataExfiltration` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for skillDataExfiltration issues. - `skillDiscoveryAbuse` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for skillDiscoveryAbuse issues. - `skillHardcodedSecrets` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for skillHardcodedSecrets issues. - `skillObfuscation` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for skillObfuscation issues. - `skillPreExecution` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for skillPreExecution issues. - `skillPromptInjection` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for skillPromptInjection issues. - `skillResourceAbuse` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for skillResourceAbuse issues. - `skillSupplyChain` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for skillSupplyChain issues. - `skillToolAbuse` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for skillToolAbuse issues. - `skillToolChaining` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for skillToolChaining issues. - `skillTransitiveTrust` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for skillTransitiveTrust issues. - `socketUpgradeAvailable` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for socketUpgradeAvailable issues. - `longStrings` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for longStrings issues. - `highEntropyStrings` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for highEntropyStrings issues. - `urlStrings` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for urlStrings issues. - `usesEval` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for usesEval issues. - `dynamicRequire` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for dynamicRequire issues. - `envVars` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for envVars issues. - `missingDependency` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for missingDependency issues. - `unusedDependency` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for unusedDependency issues. - `peerDependency` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for peerDependency issues. - `uncaughtOptionalDependency` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for uncaughtOptionalDependency issues. - `unresolvedRequire` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for unresolvedRequire issues. - `extraneousDependency` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for extraneousDependency issues. - `obfuscatedRequire` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for obfuscatedRequire issues. - `obfuscatedFile` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for obfuscatedFile issues. - `minifiedFile` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for minifiedFile issues. - `installScripts` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for installScripts issues. - `hasNativeCode` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for hasNativeCode issues. - `binScriptConfusion` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for binScriptConfusion issues. - `shellScriptOverride` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for shellScriptOverride issues. - `didYouMean` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for didYouMean issues. - `gptDidYouMean` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for gptDidYouMean issues. - `bidi` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for bidi issues. - `zeroWidth` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for zeroWidth issues. - `badEncoding` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for badEncoding issues. - `homoglyphs` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for homoglyphs issues. - `invisibleChars` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for invisibleChars issues. - `suspiciousString` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for suspiciousString issues. - `potentialVulnerability` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for potentialVulnerability issues. - `vsxProposedApiUsage` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for vsxProposedApiUsage issues. - `vsxActivationWildcard` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for vsxActivationWildcard issues. - `vsxWorkspaceContainsActivation` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for vsxWorkspaceContainsActivation issues. - `vsxUntrustedWorkspaceSupported` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for vsxUntrustedWorkspaceSupported issues. - `vsxVirtualWorkspaceSupported` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for vsxVirtualWorkspaceSupported issues. - `vsxWebviewContribution` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for vsxWebviewContribution issues. - `vsxDebuggerContribution` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for vsxDebuggerContribution issues. - `vsxExtensionDependency` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for vsxExtensionDependency issues. - `vsxExtensionPack` object - `action` 'defer' | 'error' | 'warn' | 'monitor' | 'ignore', required — The action to take for vsxExtensionPack issues. - `securityPolicyDefault` 'default' | 'low' | 'medium' | 'high' — The default security policy for the organization ## Other responses - `400` — Bad request - `401` — Unauthorized - `403` — Insufficient max_quota for API method - `404` — Resource not found - `429` — Insufficient quota for API route --- [API](https://skmtc.dev/socket-dev/apis/socket.md) · [All operations](https://skmtc.dev/socket-dev/apis/socket/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/socket-dev/socket/revisions/bf994b75d33f/schema)