---
title: "Get Socket Basics configuration, including toggles for the various tools it supports."
method: GET
path: "/orgs/{org_slug}/settings/socket-basics"
tags: ["org-settings"]
---

# Get Socket Basics configuration, including toggles for the various tools it supports.

`GET /orgs/{org_slug}/settings/socket-basics`

Socket Basics is a CI/CD security scanning suite that runs on your source code, designed to complement Socket SCA and provide full coverage.

- **SAST** - Find issues and risks with your code via static analysis using best in class Open Source tools
- **Secret Scanning** - Detected potentially leaked secrets and credentials within your code
- **Container Security** - Docker image and Dockerfile vulnerability scanning

This endpoint consumes 1 unit of your quota.

This endpoint requires the following org token scopes:
- socket-basics:read

## Path parameters

- `org_slug` string, required

## Response `200`

Socket Basics settings

- object
  - `consoleTabularEnabled` boolean — Enable tabular console output
  - `consoleJsonEnabled` boolean — Enable JSON console output
  - `verbose` boolean — Enable verbose logging
  - `allLanguagesEnabled` boolean — Enable all language SAST scanning
  - `pythonSastEnabled` boolean — Run Python SAST scanning
  - `javascriptSastEnabled` boolean — Run JavaScript SAST scanning
  - `goSastEnabled` boolean — Run Go SAST scanning
  - `golangSastEnabled` boolean — Run Golang SAST scanning
  - `javaSastEnabled` boolean — Run Java SAST scanning
  - `phpSastEnabled` boolean — Run PHP SAST scanning
  - `rubySastEnabled` boolean — Run Ruby SAST scanning
  - `csharpSastEnabled` boolean — Run C# SAST scanning
  - `dotnetSastEnabled` boolean — Run .NET SAST scanning
  - `cSastEnabled` boolean — Run C SAST scanning
  - `cppSastEnabled` boolean — Run C++ SAST scanning
  - `kotlinSastEnabled` boolean — Run Kotlin SAST scanning
  - `scalaSastEnabled` boolean — Run Scala SAST scanning
  - `swiftSastEnabled` boolean — Run Swift SAST scanning
  - `rustSastEnabled` boolean — Run Rust SAST scanning
  - `elixirSastEnabled` boolean — Run Elixir SAST scanning
  - `allRulesEnabled` boolean — Enable all SAST rules
  - `pythonEnabledRules` string — Comma-separated list of enabled Python SAST rules
  - `pythonDisabledRules` string — Comma-separated list of disabled Python SAST rules
  - `javascriptEnabledRules` string — Comma-separated list of enabled JavaScript SAST rules
  - `javascriptDisabledRules` string — Comma-separated list of disabled JavaScript SAST rules
  - `goEnabledRules` string — Comma-separated list of enabled Go SAST rules
  - `goDisabledRules` string — Comma-separated list of disabled Go SAST rules
  - `javaEnabledRules` string — Comma-separated list of enabled Java SAST rules
  - `javaDisabledRules` string — Comma-separated list of disabled Java SAST rules
  - `kotlinEnabledRules` string — Comma-separated list of enabled Kotlin SAST rules
  - `kotlinDisabledRules` string — Comma-separated list of disabled Kotlin SAST rules
  - `scalaEnabledRules` string — Comma-separated list of enabled Scala SAST rules
  - `scalaDisabledRules` string — Comma-separated list of disabled Scala SAST rules
  - `phpEnabledRules` string — Comma-separated list of enabled PHP SAST rules
  - `phpDisabledRules` string — Comma-separated list of disabled PHP SAST rules
  - `rubyEnabledRules` string — Comma-separated list of enabled Ruby SAST rules
  - `rubyDisabledRules` string — Comma-separated list of disabled Ruby SAST rules
  - `csharpEnabledRules` string — Comma-separated list of enabled C# SAST rules
  - `csharpDisabledRules` string — Comma-separated list of disabled C# SAST rules
  - `dotnetEnabledRules` string — Comma-separated list of enabled .NET SAST rules
  - `dotnetDisabledRules` string — Comma-separated list of disabled .NET SAST rules
  - `cEnabledRules` string — Comma-separated list of enabled C SAST rules
  - `cDisabledRules` string — Comma-separated list of disabled C SAST rules
  - `cppEnabledRules` string — Comma-separated list of enabled C++ SAST rules
  - `cppDisabledRules` string — Comma-separated list of disabled C++ SAST rules
  - `swiftEnabledRules` string — Comma-separated list of enabled Swift SAST rules
  - `swiftDisabledRules` string — Comma-separated list of disabled Swift SAST rules
  - `rustEnabledRules` string — Comma-separated list of enabled Rust SAST rules
  - `rustDisabledRules` string — Comma-separated list of disabled Rust SAST rules
  - `elixirEnabledRules` string — Comma-separated list of enabled Elixir SAST rules
  - `elixirDisabledRules` string — Comma-separated list of disabled Elixir SAST rules
  - `openGrepNotificationMethod` string — Notification method for OpenGrep
  - `socketTier1Enabled` boolean — Enable Socket full application reachability analysis
  - `socketAdditionalParams` string — Additional parameters for Socket SCA
  - `secretScanningEnabled` boolean — Enable secret scanning
  - `trufflehogExcludeDir` string — Directories to exclude from Trufflehog scanning
  - `trufflehogShowUnverified` boolean — Show unverified secrets in Trufflehog results
  - `trufflehogNotificationMethod` string — Notification method for Trufflehog
  - `containerImagesToScan` string — Comma-separated list of container images to scan
  - `dockerfiles` string — Comma-separated list of Dockerfiles to scan
  - `trivyImageEnabled` boolean — Enable Trivy image scanning
  - `trivyDockerfileEnabled` boolean — Enable Trivy Dockerfile scanning
  - `trivyNotificationMethod` string — Notification method for Trivy
  - `trivyDisabledRules` string — Comma-separated list of disabled Trivy rules
  - `trivyImageScanningDisabled` boolean — Disable Trivy image scanning
  - `slackWebhookUrl` string — Slack webhook URL for notifications
  - `webhookUrl` string — Generic webhook URL for notifications
  - `msSentinelWorkspaceId` string — Microsoft Sentinel workspace ID
  - `msSentinelKey` string — Microsoft Sentinel key
  - `sumologicEndpoint` string — Sumo Logic endpoint URL
  - `jiraUrl` string — Jira server URL
  - `jiraProject` string — Jira project key
  - `jiraEmail` string — Jira user email
  - `jiraApiToken` string — Jira API token
  - `githubToken` string — GitHub API token
  - `githubApiUrl` string — GitHub API URL
  - `msteamsWebhookUrl` string — Microsoft Teams webhook URL
  - `s3Enabled` boolean — Enable S3 upload for scan results
  - `s3Bucket` string — S3 bucket name
  - `s3AccessKey` string — S3 access key
  - `s3SecretKey` string — S3 secret key
  - `s3Endpoint` string — S3 endpoint URL
  - `s3Region` string — S3 region
  - `externalCveScanningEnabled` boolean — Enable external CVE scanning
  - `socketScanningEnabled` boolean — Enable Socket dependency scanning (legacy)
  - `socketScaEnabled` boolean — Enable Socket SCA scanning (legacy)
  - `additionalParameters` string — Additional configuration parameters (legacy)

## Other responses

- `403` — Insufficient max_quota for API method
- `404` — Resource not found
- `429` — Insufficient quota for API route

---

[API](https://skmtc.dev/socket-dev/apis/socket.md) · [All operations](https://skmtc.dev/socket-dev/apis/socket/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/socket-dev/socket/revisions/bf994b75d33f/schema)
