---
title: "GET /experimental/vulnerability-remediation-runs/{id}"
method: GET
path: "/experimental/vulnerability-remediation-runs/{id}"
tags: ["Tessl Reviewer"]
---

# GET /experimental/vulnerability-remediation-runs/{id}

`GET /experimental/vulnerability-remediation-runs/{id}`

## Request

- Base URL: `https://api.tessl.io`
- URL: `https://api.tessl.io/experimental/vulnerability-remediation-runs/{id}`
- Auth: none declared

Gets a vulnerability remediation run by ID: its status, timings, failure message, result summary, pull request and heads, and Temporal workflow id. Readable by members of the run’s org, and by a live run key of the same org whose environment sets `readOtherRunLogs`, which is audited. Anyone else gets a 404.

## Path parameters

- `id` string, uuid, required

## Headers

- `Authorization` string

## Response `200`

Default Response

- object
  - `links` object, required
    - `self` string, uri, required
  - `data` object, required
    - `id` string, uuid, required
    - `type` 'vulnerability-remediation-run', required
    - `attributes` object, required
      - `orgId` string, uuid, required
      - `workflowId` string, required
      - `status` string, required: `queued`, `running`, `awaiting_publication`, `published`, `blocked`, `undone`, `failed` or `cancelled`.
      - `failureMessage` string, nullable, required: Why the run failed, was blocked or was cancelled, as the fixed sentence the pull request shows.
      - `mode` string, required
      - `scanOnly` boolean, required
      - `scanners` string[], required
      - `repositoryFullName` string, required
      - `pullRequestNumber` integer, required
      - `requestedBaseSha` string, required
      - `requestedHeadSha` string, required
      - `fixCommitSha` string, nullable, required
      - `publishedHeadSha` string, nullable, required
      - `durationMs` integer, nullable, required
      - `queuedAt` string, date-time, required
      - `startedAt` string, date-time, nullable, required
      - `completedAt` string, date-time, nullable, required
      - `publishedAt` string, date-time, nullable, required
      - `undoneAt` string, date-time, nullable, required
      - `updatedAt` string, date-time, required
      - `result` object, nullable, required: A summary of the run's result, once it has one.
        - `disposition` string, required: `verified`, `blocked`, `cap_reached` or `scanned`.
        - `reason` string, nullable, required: Why remediation stopped, when it was blocked.
        - `scanner` string, required
        - `scannedHeadSha` string, required
        - `iterations` integer, required
        - `incompleteScanModes` string[], required
        - `findings` object, required
          - `fixed` integer, required
          - `snoozed` integer, required
          - `remaining` integer, required
          - `ignored` integer, required
        - `fixes` integer, required

## Other responses

- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `500`: Internal Server Error

## Changes

- **2026-10-29** `06d2142ed144`: 1 info
  - api operation id `getVulnerabilityRemediationRun` was added
- **2026-10-28** `2d42f70c9d30`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/tessl/apis/tessl-api/changes/experimental/vulnerability-remediation-runs/:id/get.md)

---

[API](https://skmtc.dev/tessl/apis/tessl-api.md) - [All operations](https://skmtc.dev/tessl/apis/tessl-api/llms.txt) - [OpenAPI document](https://skmtc.dev/tessl/apis/tessl-api/revisions/4fa2a17154e4?raw)