---
title: "List SCA alerts"
method: POST
path: "/api/v1/sca/alerts/search"
tags: ["SCA"]
---

# List SCA alerts

`POST /api/v1/sca/alerts/search`

## Request

- Base URL: `https://zeropath.com`
- URL: `https://zeropath.com/api/v1/sca/alerts/search`
- Auth: API key in header `X-ZeroPath-API-Token-Id` and API key in header `X-ZeroPath-API-Token-Secret`

List consolidated SCA alerts with filters for language, severity, and reachability.

## Request body

- ListScaAlertsInput
  - `organizationId` string
  - `repositoryIds` string[]
  - `page` integer
  - `pageSize` integer
  - `query` string: Filter by advisory identifier, aliases, or title
  - `languages` string[]: Filter by programming languages associated with reachability
  - `severities` string[]
  - `reachability` string[]: Reachability classification for grouped issues
  - `hasWizExposure` true: Filter to alerts associated with applications exposed by Wiz

## Response `200`

Successful response

- ScaAlertListResponse
  - `alerts` ScaAlert[]
    - `id` string, required
    - `isAlerted` boolean, required
    - `createdAt` string, date-time, required
    - `firstSeenAt` string, date-time, required
    - `occurrenceCount` integer, required
    - `acknowledgedAt` string, date-time, nullable, required: When the user acknowledged this alert (VULN-03). null = not acknowledged (in the `new` list). Distinct from isAlerted (notification state).
    - `acknowledged` boolean, required: Whether the user has acknowledged this alert (acknowledgedAt != null).
    - `updatedAt` string, date-time, required
    - `metadata` object, required
      - `id` string, required
      - `packageIdentifier` string, required
      - `aliases` string[]
      - `references` string[]
      - `summary` string, required
      - `description` string, required
      - `severityScore` number, nullable
      - `severity` 'critical' | 'high' | 'medium' | 'low' | 'info' | 'null', nullable
      - `isMalicious` boolean, required
    - `languages` string[], required
    - `reachabilityCounts` object, required
      - `reachable` integer, required
      - `needsReview` integer, required
      - `unreachable` integer, required
      - `notTested` integer, required
  - `totalCount` integer
  - `page` integer
  - `pageSize` integer

## Other responses

- `400`: Bad Request
- `401`: Unauthorized

---

[API](https://skmtc.dev/zeropath/apis/zeropath-api-2.md) - [All operations](https://skmtc.dev/zeropath/apis/zeropath-api-2/llms.txt) - [OpenAPI document](https://skmtc.dev/zeropath/apis/zeropath-api-2/revisions/ea6ae4b68cd3?raw)