---
title: "List SCA repositories with dependency inventory"
method: POST
path: "/api/v1/sca/repositories/search"
tags: ["SCA"]
---

# List SCA repositories with dependency inventory

`POST /api/v1/sca/repositories/search`

## Request

- Base URL: `https://zeropath.com`
- URL: `https://zeropath.com/api/v1/sca/repositories/search`
- Auth: API key in header `X-ZeroPath-API-Token-Id` and API key in header `X-ZeroPath-API-Token-Secret`

Fetch repositories along with aggregated dependency inventory data.

## Request body

- ListScaRepositoryInventoryInput
  - `organizationId` string
  - `repositoryIds` string[]
  - `branch` string: Read each repository as of its newest finished scan on this branch. Omit for the newest scan on any branch.
  - `cursor` string
  - `limit` integer
  - `searchQuery` string
  - `hasVulnerabilities` boolean
  - `packageType` 'public' | 'private'
  - `ecosystems` string[]

## Response `200`

Successful response

- ScaRepositoryInventoryResponse
  - `repositories` ScaRepositoryInventoryItem[], required
    - `repositoryId` string, required
    - `repositoryName` string, required
    - `monorepoName` string, nullable
    - `monorepoPartitionRole` 'none' | 'scoped' | 'fallback', required
    - `scaScanId` string, required
    - `scaScanUpdatedAt` string, date-time, required
    - `branch` string, nullable, required
    - `commitSha` string, required
    - `codeScanId` string, nullable, required
    - `manifestCount` integer, required
    - `uniquePackageCount` integer, required
    - `totalInstanceCount` integer, required
    - `vulnerablePackageCount` integer, nullable
  - `nextCursor` string, nullable

## Other responses

- `400`: Bad Request
- `401`: Unauthorized

---

[API](https://skmtc.dev/zeropath/apis/zeropath-api-2.md) - [All operations](https://skmtc.dev/zeropath/apis/zeropath-api-2/llms.txt) - [OpenAPI document](https://skmtc.dev/zeropath/apis/zeropath-api-2/revisions/ea6ae4b68cd3?raw)