---
title: "List manifests for a repository"
method: POST
path: "/api/v1/sca/manifests/search"
tags: ["SCA"]
---

# List manifests for a repository

`POST /api/v1/sca/manifests/search`

## Request

- Base URL: `https://zeropath.com`
- URL: `https://zeropath.com/api/v1/sca/manifests/search`
- Auth: API key in header `X-ZeroPath-API-Token-Id` and API key in header `X-ZeroPath-API-Token-Secret`

Fetch manifests associated with a repository scan along with dependency counts.

## Request body

- ListScaManifestsForRepositoryInput
  - `organizationId` string
  - `repositoryId` string, required
  - `scaScanId` string, required
  - `cursor` string
  - `limit` integer
  - `searchQuery` string
  - `hasVulnerabilities` boolean
  - `transitivity` 'direct' | 'transitive'
  - `packageType` 'public' | 'private'
  - `ecosystems` string[]

## Response `200`

Successful response

- ScaRepositoryManifestListResponse
  - `manifests` ScaRepositoryManifest[], required
    - `manifestId` string, required
    - `manifestPath` string, required
    - `applicationName` string, nullable
    - `ecosystem` string, nullable
    - `totalPackages` integer, required
    - `vulnerablePackages` integer, required
    - `directPackages` integer, required
    - `transitivePackages` integer, required
  - `nextCursor` string, nullable
  - `inventoryRetiredAt` string, date-time, nullable: When this scan's dependency inventory was retired because a newer scan superseded it; null while present.

## Other responses

- `400`: Bad Request
- `401`: Unauthorized

---

[API](https://skmtc.dev/zeropath/apis/zeropath-api-2.md) - [All operations](https://skmtc.dev/zeropath/apis/zeropath-api-2/llms.txt) - [OpenAPI document](https://skmtc.dev/zeropath/apis/zeropath-api-2/revisions/ea6ae4b68cd3?raw)