---
title: "Get"
method: POST
path: "/api/v2/issues/get"
tags: ["Issues"]
---

# Get

`POST /api/v2/issues/get`

## Request

- Base URL: `https://zeropath.com`
- URL: `https://zeropath.com/api/v2/issues/get`
- Auth: API key in header `X-ZeroPath-API-Token-Id` and API key in header `X-ZeroPath-API-Token-Secret`

Get full details for a single security issue by its ID. When remediation data exists, the response includes `vulnerabilityPatch` with the proposed fix payload (`gitDiff`, `localBranch`, `prTitle`, `prDescription`, `prLink`, `pullRequestStatus`, `validated`, timestamps, and `error`) as well as `patchGenerationRequestView` when patch generation is queued, running, failed, or completed. When runtime validation has tested the issue, the response includes the latest `runtimeValidation` verdict, reasoning, evidence, tested targets/roles, and runnable Python POC code when the agent confirmed exploitability.

## Request body

- IssuesGetInput
  - `organizationId` string
  - `issueId` string, required

## Response `200`

Issue details

- IssueDetail
  - `id` string, required
  - `issueStatus` 'PENDING_REVIEW' | 'REVIEWING' | 'PATCHING' | 'NON_EXPLOITABLE' | 'FALSE_POSITIVE' | 'ACCEPTED_RISK' | 'RESOLVED' | 'BACKLOG' | 'INFORMATIONAL', required
  - `severity` number, nullable, required
  - `confidence` number, required
  - `score` number, nullable, required
  - `createdAt` string, required
  - `url` string, required
  - `generatedTitle` string, required
  - `generatedDescription` string, required
  - `vulnClass` string, required
  - `vulnImpact` string, nullable, required
  - `affectedFile` string, required
  - `issueCodeRange` object, nullable, required
    - `startLine` number, required
    - `endLine` number, required
    - `snippet` string, required
    - `snippetStart` number, required
    - `snippetEnd` number, required
  - `cwes` string[], required
  - `archivedAt` string, nullable, required
  - `silencedAt` string, nullable, required
  - `falsePositiveAt` string, nullable, required
  - `noLongerDetectedAt` string, nullable, required
  - `resolvedAt` string, nullable, required
  - `noLongerDetectedReason` string, nullable, required
  - `unpatchable` boolean, nullable, required
  - `unpatchableReason` string, nullable, required
  - `unpatchableRemediationInstructions` string, nullable, required
  - `userNotes` string, nullable, required
  - `validated` 'CONFIRMED' | 'DISCONFIRMED' | 'UNKNOWN', nullable, required
  - `validationSecurityAssessment` string, nullable, required
  - `nonExploitableReason` string, nullable, required
  - `falsePositiveReason` string, nullable, required
  - `silencedReason` string, nullable, required
  - `error` string, nullable, required
  - `stateChangeAuthor` string, nullable, required
  - `prAllowed` boolean, required
  - `canGeneratePatchesOnDemand` boolean, required
  - `isPrBlocked` boolean, nullable, required
  - `repository` union, required
    - object
      - `id` string, required
      - `projectId` string, required
      - `name` string, required
      - `monorepoName` string, nullable, required
      - `defaultScanTargetBranch` string, nullable, required
      - `directoryPartitions` string[], required
      - `monorepoPartitionRole` 'none' | 'scoped' | 'fallback', required
      - `tags` object[], required
        - `id` string, required
        - `name` string, required
        - `priority` number, required
      - `isPrScanningEnabled` boolean, nullable, required
      - `isPrScanIssueSummaryEnabled` boolean, nullable, required
      - `isPrScanCleanSummaryEnabled` boolean, nullable, required
      - `issueCounts` object
        - `newOpen` integer, required
        - `open` integer, required
        - `patched` integer, required
        - `archived` integer, required
        - `falsePositive` integer, required
        - `patchable` integer, required
        - `closed` integer, required
        - `silenced` integer, required
      - `scanCount` integer
      - `lastScannedAt` string, nullable
      - `lastScanFailure` object, nullable
        - `message` string, required
        - `outcome` 'FAILED' | 'CANNOT_SCAN', required
        - `details` object, required
          - `scanId` string, required
          - `branch` string, nullable, required
          - `recovery` 'CONNECTION' | 'BRANCH' | 'NONE', required
      - `lastScanError` string, nullable: Deprecated: use lastScanFailure instead. Message of the most recent failed scan, or null.
      - `vcs` object, required
        - `vcsType` 'github', required
        - `url` string, required
        - `externalGithubRepositoryId` string, required
        - `githubAppInstallationId` string, nullable, required
        - `externalGithubAppInstallationId` string, nullable, required
        - `linkActive` boolean, required
        - `patLink` boolean, required
    - object
      - `id` string, required
      - `projectId` string, required
      - `name` string, required
      - `monorepoName` string, nullable, required
      - `defaultScanTargetBranch` string, nullable, required
      - `directoryPartitions` string[], required
      - `monorepoPartitionRole` 'none' | 'scoped' | 'fallback', required
      - `tags` object[], required
        - `id` string, required
        - `name` string, required
        - `priority` number, required
      - `isPrScanningEnabled` boolean, nullable, required
      - `isPrScanIssueSummaryEnabled` boolean, nullable, required
      - `isPrScanCleanSummaryEnabled` boolean, nullable, required
      - `issueCounts` object
        - `newOpen` integer, required
        - `open` integer, required
        - `patched` integer, required
        - `archived` integer, required
        - `falsePositive` integer, required
        - `patchable` integer, required
        - `closed` integer, required
        - `silenced` integer, required
      - `scanCount` integer
      - `lastScannedAt` string, nullable
      - `lastScanFailure` object, nullable
        - `message` string, required
        - `outcome` 'FAILED' | 'CANNOT_SCAN', required
        - `details` object, required
          - `scanId` string, required
          - `branch` string, nullable, required
          - `recovery` 'CONNECTION' | 'BRANCH' | 'NONE', required
      - `lastScanError` string, nullable: Deprecated: use lastScanFailure instead. Message of the most recent failed scan, or null.
      - `vcs` object, required
        - `vcsType` 'gitlab', required
        - `url` string, required
        - `gitlabRepositoryId` string, required
        - `gitlabInstallationId` string, nullable, required
        - `externalGitlabProjectId` string, required
        - `linkActive` boolean, required
        - `healthStatus` 'OK' | 'UNAUTHORIZED' | 'NOT_FOUND' | 'ERROR' | 'UNKNOWN', required
        - `lastHealthCheckAt` string, nullable, required
        - `installation` object, nullable, required
          - `id` string, required
          - `url` string, required
          - `groupName` string, nullable, required
          - `projectName` string, nullable, required
        - `installationLabel` string, nullable, required
    - object
      - `id` string, required
      - `projectId` string, required
      - `name` string, required
      - `monorepoName` string, nullable, required
      - `defaultScanTargetBranch` string, nullable, required
      - `directoryPartitions` string[], required
      - `monorepoPartitionRole` 'none' | 'scoped' | 'fallback', required
      - `tags` object[], required
        - `id` string, required
        - `name` string, required
        - `priority` number, required
      - `isPrScanningEnabled` boolean, nullable, required
      - `isPrScanIssueSummaryEnabled` boolean, nullable, required
      - `isPrScanCleanSummaryEnabled` boolean, nullable, required
      - `issueCounts` object
        - `newOpen` integer, required
        - `open` integer, required
        - `patched` integer, required
        - `archived` integer, required
        - `falsePositive` integer, required
        - `patchable` integer, required
        - `closed` integer, required
        - `silenced` integer, required
      - `scanCount` integer
      - `lastScannedAt` string, nullable
      - `lastScanFailure` object, nullable
        - `message` string, required
        - `outcome` 'FAILED' | 'CANNOT_SCAN', required
        - `details` object, required
          - `scanId` string, required
          - `branch` string, nullable, required
          - `recovery` 'CONNECTION' | 'BRANCH' | 'NONE', required
      - `lastScanError` string, nullable: Deprecated: use lastScanFailure instead. Message of the most recent failed scan, or null.
      - `vcs` object, required
        - `vcsType` 'bitbucket', required
        - `externalBitbucketRepositoryId` string, required
        - `url` string, required
        - `linkActive` boolean, required
    - object
      - `id` string, required
      - `projectId` string, required
      - `name` string, required
      - `monorepoName` string, nullable, required
      - `defaultScanTargetBranch` string, nullable, required
      - `directoryPartitions` string[], required
      - `monorepoPartitionRole` 'none' | 'scoped' | 'fallback', required
      - `tags` object[], required
        - `id` string, required
        - `name` string, required
        - `priority` number, required
      - `isPrScanningEnabled` boolean, nullable, required
      - `isPrScanIssueSummaryEnabled` boolean, nullable, required
      - `isPrScanCleanSummaryEnabled` boolean, nullable, required
      - `issueCounts` object
        - `newOpen` integer, required
        - `open` integer, required
        - `patched` integer, required
        - `archived` integer, required
        - `falsePositive` integer, required
        - `patchable` integer, required
        - `closed` integer, required
        - `silenced` integer, required
      - `scanCount` integer
      - `lastScannedAt` string, nullable
      - `lastScanFailure` object, nullable
        - `message` string, required
        - `outcome` 'FAILED' | 'CANNOT_SCAN', required
        - `details` object, required
          - `scanId` string, required
          - `branch` string, nullable, required
          - `recovery` 'CONNECTION' | 'BRANCH' | 'NONE', required
      - `lastScanError` string, nullable: Deprecated: use lastScanFailure instead. Message of the most recent failed scan, or null.
      - `vcs` object, required
        - `vcsType` 'azureDevOps', required
        - `azureRepositoryId` string, required
        - `azureDevOpsInstallationId` string, required
        - `externalAzureRepositoryId` string, required
        - `projectId` string, required
        - `projectName` string, required
        - `url` string, required
        - `webUrl` string, required
        - `linkActive` boolean, required
        - `installation` object, nullable, required
          - `id` string, required
          - `organization` string, required
          - `organizationUrl` string, required
          - `authType` 'OAUTH' | 'PAT', required
    - object
      - `id` string, required
      - `projectId` string, required
      - `name` string, required
      - `monorepoName` string, nullable, required
      - `defaultScanTargetBranch` string, nullable, required
      - `directoryPartitions` string[], required
      - `monorepoPartitionRole` 'none' | 'scoped' | 'fallback', required
      - `tags` object[], required
        - `id` string, required
        - `name` string, required
        - `priority` number, required
      - `isPrScanningEnabled` boolean, nullable, required
      - `isPrScanIssueSummaryEnabled` boolean, nullable, required
      - `isPrScanCleanSummaryEnabled` boolean, nullable, required
      - `issueCounts` object
        - `newOpen` integer, required
        - `open` integer, required
        - `patched` integer, required
        - `archived` integer, required
        - `falsePositive` integer, required
        - `patchable` integer, required
        - `closed` integer, required
        - `silenced` integer, required
      - `scanCount` integer
      - `lastScannedAt` string, nullable
      - `lastScanFailure` object, nullable
        - `message` string, required
        - `outcome` 'FAILED' | 'CANNOT_SCAN', required
        - `details` object, required
          - `scanId` string, required
          - `branch` string, nullable, required
          - `recovery` 'CONNECTION' | 'BRANCH' | 'NONE', required
      - `lastScanError` string, nullable: Deprecated: use lastScanFailure instead. Message of the most recent failed scan, or null.
      - `vcs` object, required
        - `vcsType` 'gerrit', required
        - `url` string, required
        - `webUrl` string, required
        - `gerritRepositoryId` string, required
        - `gerritInstallationId` string, required
        - `projectName` string, required
        - `state` 'ACTIVE' | 'READ_ONLY' | 'HIDDEN', required
    - object
      - `id` string, required
      - `projectId` string, required
      - `name` string, required
      - `monorepoName` string, nullable, required
      - `defaultScanTargetBranch` string, nullable, required
      - `directoryPartitions` string[], required
      - `monorepoPartitionRole` 'none' | 'scoped' | 'fallback', required
      - `tags` object[], required
        - `id` string, required
        - `name` string, required
        - `priority` number, required
      - `isPrScanningEnabled` boolean, nullable, required
      - `isPrScanIssueSummaryEnabled` boolean, nullable, required
      - `isPrScanCleanSummaryEnabled` boolean, nullable, required
      - `issueCounts` object
        - `newOpen` integer, required
        - `open` integer, required
        - `patched` integer, required
        - `archived` integer, required
        - `falsePositive` integer, required
        - `patchable` integer, required
        - `closed` integer, required
        - `silenced` integer, required
      - `scanCount` integer
      - `lastScannedAt` string, nullable
      - `lastScanFailure` object, nullable
        - `message` string, required
        - `outcome` 'FAILED' | 'CANNOT_SCAN', required
        - `details` object, required
          - `scanId` string, required
          - `branch` string, nullable, required
          - `recovery` 'CONNECTION' | 'BRANCH' | 'NONE', required
      - `lastScanError` string, nullable: Deprecated: use lastScanFailure instead. Message of the most recent failed scan, or null.
      - `vcs` object, required
        - `vcsType` 'genericGit', required
        - `url` string, required
        - `externalRepoId` string, required
    - object
      - `id` string, required
      - `projectId` string, required
      - `name` string, required
      - `monorepoName` string, nullable, required
      - `defaultScanTargetBranch` string, nullable, required
      - `directoryPartitions` string[], required
      - `monorepoPartitionRole` 'none' | 'scoped' | 'fallback', required
      - `tags` object[], required
        - `id` string, required
        - `name` string, required
        - `priority` number, required
      - `isPrScanningEnabled` boolean, nullable, required
      - `isPrScanIssueSummaryEnabled` boolean, nullable, required
      - `isPrScanCleanSummaryEnabled` boolean, nullable, required
      - `issueCounts` object
        - `newOpen` integer, required
        - `open` integer, required
        - `patched` integer, required
        - `archived` integer, required
        - `falsePositive` integer, required
        - `patchable` integer, required
        - `closed` integer, required
        - `silenced` integer, required
      - `scanCount` integer
      - `lastScannedAt` string, nullable
      - `lastScanFailure` object, nullable
        - `message` string, required
        - `outcome` 'FAILED' | 'CANNOT_SCAN', required
        - `details` object, required
          - `scanId` string, required
          - `branch` string, nullable, required
          - `recovery` 'CONNECTION' | 'BRANCH' | 'NONE', required
      - `lastScanError` string, nullable: Deprecated: use lastScanFailure instead. Message of the most recent failed scan, or null.
      - `vcs` object, required
        - `vcsType` 'cvs', required
        - `url` string, required
        - `cvsRepositoryId` string, required
        - `cvsServerId` string, required
        - `cvsRoot` string, required
        - `modulePath` string, required
        - `transport` 'CVS_CHECKOUT' | 'SCP_DIRECTORY', required
        - `branchTag` string, nullable, required
    - object
      - `id` string, required
      - `projectId` string, required
      - `name` string, required
      - `monorepoName` string, nullable, required
      - `defaultScanTargetBranch` string, nullable, required
      - `directoryPartitions` string[], required
      - `monorepoPartitionRole` 'none' | 'scoped' | 'fallback', required
      - `tags` object[], required
        - `id` string, required
        - `name` string, required
        - `priority` number, required
      - `isPrScanningEnabled` boolean, nullable, required
      - `isPrScanIssueSummaryEnabled` boolean, nullable, required
      - `isPrScanCleanSummaryEnabled` boolean, nullable, required
      - `issueCounts` object
        - `newOpen` integer, required
        - `open` integer, required
        - `patched` integer, required
        - `archived` integer, required
        - `falsePositive` integer, required
        - `patchable` integer, required
        - `closed` integer, required
        - `silenced` integer, required
      - `scanCount` integer
      - `lastScannedAt` string, nullable
      - `lastScanFailure` object, nullable
        - `message` string, required
        - `outcome` 'FAILED' | 'CANNOT_SCAN', required
        - `details` object, required
          - `scanId` string, required
          - `branch` string, nullable, required
          - `recovery` 'CONNECTION' | 'BRANCH' | 'NONE', required
      - `lastScanError` string, nullable: Deprecated: use lastScanFailure instead. Message of the most recent failed scan, or null.
      - `vcs` object, required
        - `vcsType` 'uploaded', required
  - `scan` union, required
    - object
      - `id` string, required
      - `repository` object, required
        - `id` string, required
      - `commitSha` string, nullable, required
      - `scanTargetBranch` string, nullable, required
      - `createdAt` string, required
      - `scanKind` 'code', required
      - `codeScan` union, required
        - object
          - `codeScanType` 'PrScan', required
          - `prTriggeredURL` string, required
          - `prTargetBranch` string, nullable, required
        - object
          - `codeScanType` 'FullScan', required
          - `prTriggeredURL` unknown, required
          - `prTargetBranch` unknown, required
      - `scaScan` unknown, required
    - object
      - `id` string, required
      - `repository` object, required
        - `id` string, required
      - `commitSha` string, nullable, required
      - `scanTargetBranch` string, nullable, required
      - `createdAt` string, required
      - `scanKind` 'sca', required
      - `codeScan` unknown, required
      - `scaScan` object, required
    - object
      - `id` string, required
      - `repository` object, required
        - `id` string, required
      - `commitSha` string, nullable, required
      - `scanTargetBranch` string, nullable, required
      - `createdAt` string, required
      - `scanKind` 'container', required
      - `codeScan` unknown, required
      - `scaScan` unknown, required
      - `imageRef` string, required
  - `language` string, nullable, required
  - `discoveryTool` string, nullable, required
  - `cvssScore` string, nullable, required
  - `cvssScoreDetailed` object, nullable, required
    - `id` string, required
    - `cvssVector` string, required
    - `severity` number, required
    - `cvssV3Vector` string, nullable, required
    - `cvssV3Severity` number, nullable, required
    - `attackVectorReasoning` string, required
    - `attackComplexityReasoning` string, required
    - `attackRequirementsReasoning` string, required
    - `privilegesRequiredReasoning` string, required
    - `userInteractionReasoning` string, required
    - `confidentialityReasoning` string, required
    - `integrityReasoning` string, required
    - `availabilityReasoning` string, required
    - `createdAt` union
      - string
      - string
    - `updatedAt` union
      - string
      - string
  - `cvssReasoning` string, nullable, required
  - `vulnCategory` string, nullable, required
  - `naturalLanguageRuleViolation` object, nullable, required
    - `id` string, required
    - `ruleId` string, required
    - `title` string, required
    - `description` string, required
    - `confidence` number, required
    - `rule` object, nullable, required
      - `id` string, required
      - `name` string, nullable, required
      - `naturalLanguageRule` string, nullable, required
      - `globPattern` string, nullable, required
      - `applicableSourceTypes` string[], nullable
      - `createdAt` string, required
      - `updatedAt` string, required
  - `securityCompassCountermeasures` object[], required
    - `mappingId` string, required
    - `sdeProjectId` string, required
    - `taskId` string, required
    - `title` string, nullable, required
    - `sdeUrl` string, nullable, required
    - `matchMethod` 'NL_RULE_FK' | 'LLM', required
    - `isPrimary` boolean, required
    - `rationale` string, nullable, required
  - `scaPackage` object
    - `id` string, required
    - `name` string, required
    - `version` string, nullable, required
    - `ecosystem` string, required
    - `isPrivate` boolean, required
    - `isReachable` boolean, nullable
    - `reachableSummary` string, nullable
    - `isCompiled` boolean
    - `compiledAssetType` string, nullable
    - `chainHash` string, nullable, required
    - `manifestPath` string
    - `manifestStartLine` integer, nullable, required
    - `manifestEndLine` integer, nullable, required
    - `manifestStartColumn` integer, nullable, required
    - `manifestEndColumn` integer, nullable, required
    - `transitiveDependencies` object[], required
      - `name` string, required
      - `version` string, nullable, required
      - `order` integer, required
    - `dependencyPaths` array[]
      - object[]
        - `name` string, required
        - `version` string, nullable, required
    - `dependencyPathsTruncated` boolean
    - `dependencyPathsRetiredAt` string, date-time
    - `dependencyPathsSource` union
      - object
        - `kind` 'finding_generation', required
        - `scaPackageId` string, required
        - `isDirectDependency` boolean, required
      - object
        - `kind` 'current_generation', required
        - `scaPackageId` string, required
        - `scaScanId` string, required
        - `isDirectDependency` boolean, required
    - `licenses` object[], required
      - `id` string, required
      - `name` string, required
  - `scaVulnerability` object
    - `id` string, required
    - `packageIdentifier` string, required
    - `title` string, required
    - `description` string, required
    - `severity` number, nullable, required
    - `aliases` string[], required
    - `references` string[], required
    - `fixedVersions` string[], required
    - `recommendedFixVersion` string, nullable, required
    - `isKnownExploited` boolean, nullable, required
    - `kevDateAdded` string, nullable, required
    - `kevKnownRansomware` boolean, nullable, required
    - `epssScore` number, nullable, required
    - `epssPercentile` number, nullable, required
  - `scaReachabilityAnalyses` object[]
    - `id` string, required
    - `title` string, required
    - `description` string, required
    - `confidence` number, required
    - `severity` number, nullable, required
    - `isFalsePositive` boolean, required
    - `falsePositiveReasoning` string, nullable, required
    - `pocCode` string, nullable, required
    - `vulnerabilityLocation` object
      - `id` string, required
      - `filePath` string, required
      - `startLine` number, required
      - `endLine` number, required
      - `startColumn` number, nullable, required
      - `endColumn` number, nullable, required
      - `snippet` string, nullable, required
      - `language` string, nullable, required
    - `cvssScore` object
      - `id` string, required
      - `cvssVector` string, required
      - `severity` number, required
      - `cvssV3Vector` string, nullable, required
      - `cvssV3Severity` number, nullable, required
      - `attackVectorReasoning` string, required
      - `attackComplexityReasoning` string, required
      - `attackRequirementsReasoning` string, required
      - `privilegesRequiredReasoning` string, required
      - `userInteractionReasoning` string, required
      - `confidentialityReasoning` string, required
      - `integrityReasoning` string, required
      - `availabilityReasoning` string, required
      - `createdAt` union
        - string
        - string
      - `updatedAt` union
        - string
        - string
    - `dataFlowNodes` object[]
      - `id` string, required
      - `nodeOrder` integer, required
      - `annotation` string, required
      - `nodeCodeRange` object, required
        - `id` string, required
        - `filePath` string, required
        - `startLine` number, required
        - `endLine` number, required
        - `startColumn` number, nullable, required
        - `endColumn` number, nullable, required
        - `snippet` string, nullable, required
        - `snippetStart` number, nullable, required
        - `snippetEnd` number, nullable, required
        - `language` string, nullable, required
      - `highlights` object[], required
        - `id` string, required
        - `annotation` string, nullable, required
        - `astCodeRange` object, required
          - `id` string, required
          - `filePath` string, required
          - `startLine` number, required
          - `endLine` number, required
          - `startColumn` number, nullable, required
          - `endColumn` number, nullable, required
          - `snippet` string, nullable, required
          - `snippetStart` number, nullable, required
          - `snippetEnd` number, nullable, required
          - `language` string, nullable, required
    - `associatedSource` object
      - `id` string, required
      - `name` string, required
      - `description` string, required
      - `authentication` string, nullable, required
      - `authorization` string, nullable, required
      - `location` object, nullable, required
        - `id` string, required
        - `filePath` string, required
        - `startLine` number, required
        - `endLine` number, required
        - `startColumn` number, nullable, required
        - `endColumn` number, nullable, required
        - `snippet` string, nullable, required
        - `snippetStart` number, nullable, required
        - `snippetEnd` number, nullable, required
        - `language` string, nullable, required
    - `associatedSink` object
      - `id` string, required
      - `description` string, required
      - `location` object, required
        - `id` string, required
        - `filePath` string, required
        - `startLine` number, required
        - `endLine` number, required
        - `startColumn` number, nullable, required
        - `endColumn` number, nullable, required
        - `snippet` string, nullable, required
        - `snippetStart` number, nullable, required
        - `snippetEnd` number, nullable, required
        - `language` string, nullable, required
    - `agentReasoningSteps` object
      - `id` string, required
      - `reasoningStepsOverview` string, required
      - `reasoningSteps` object[], required
        - `id` string, required
        - `stepNo` number, required
        - `action` string, required
        - `summarizedStep` string, required
        - `isDisplay` boolean, required
    - `prescreenReasoning` object
      - `id` string, required
      - `reasoning` string, required
  - `containerVulnerability` object
    - `packageName` string, required
    - `installedVersion` string, required
    - `recommendedFixedVersion` string, nullable, required
    - `introducingLayerDigest` string, nullable, required
    - `confirmedByBothEngines` boolean, required
    - `cvssV3Vector` string, nullable, required
    - `cvssV3Score` number, nullable, required
    - `cves` object[], required
      - `cveId` string, required
      - `severity` number, required
      - `cvssV3Vector` string, nullable, required
      - `cvssV3Score` number, nullable, required
      - `fixedVersion` string, nullable, required
      - `fixState` string, required
      - `title` string, required
      - `publishedDate` string, nullable, required
      - `confirmedByBothEngines` boolean, required
  - `hasAssociatedPackageVulnerability` boolean, required
  - `associatedVulnerabilityInfo` object, nullable, required
    - `application` object, required
      - `id` string, required
      - `name` string, required
      - `description` string, required
      - `technicalStack` string[], required
      - `relativePath` string, required
      - `architecture` string, required
      - `sastApplicationExposure` object, nullable, required
        - `wizExposure` object, nullable, required
          - `dashboardUrl` string, required
          - `exposedURIs` string[], required
    - `associatedSource` union, required
      - object
        - `id` string, required
        - `name` string, required
        - `description` string, required
        - `authentication` string, nullable, required
        - `authorization` string, nullable, required
        - `location` object, nullable, required
          - `id` string, required
          - `filePath` string, required
          - `startLine` number, required
          - `endLine` number, required
          - `startColumn` number, nullable, required
          - `endColumn` number, nullable, required
          - `snippet` string, nullable, required
          - `snippetStart` number, nullable, required
          - `snippetEnd` number, nullable, required
          - `language` string, nullable, required
        - `encapsulatingFunction` object, nullable, required
          - `functionName` string, required
          - `isBuiltinFunction` boolean, required
          - `isExternalFunction` boolean, required
          - `isFromStdlib` boolean, required
          - `language` string, required
          - `libraryName` string, nullable, required
          - `astCodeRange` object, nullable, required
            - `id` string, required
            - `filePath` string, required
            - `startLine` number, required
            - `endLine` number, required
            - `startColumn` number, nullable, required
            - `endColumn` number, nullable, required
            - `snippet` string, nullable, required
            - `snippetStart` number, nullable, required
            - `snippetEnd` number, nullable, required
            - `language` string, nullable, required
        - `encapsulatingFile` object, nullable, required
          - `fileName` string, required
          - `language` string, required
        - `httpHandlerSource` object, required
          - `associatedRequestPath` string, nullable, required
          - `associatedRequestMethods` string[], required
        - `fileHandlerSource` object, nullable, required
          - `filePath` string, nullable, required
          - `filePattern` string, nullable, required
          - `filePermissions` string, nullable, required
        - `stdinHandlerSource` object, nullable, required
          - `authentication` string, nullable, required
          - `authorization` string, nullable, required
        - `browserDataSource` object, nullable, required
          - `sourceType` string, required
          - `domSelector` string, nullable, required
          - `eventType` string, nullable, required
          - `validationType` string, nullable, required
          - `dataFormat` string, nullable, required
          - `dataLifetime` string, nullable, required
        - `webSocketSource` object, nullable, required
          - `endpoint` string, nullable, required
          - `protocol` string, nullable, required
        - `cliArgumentSource` object, nullable, required
          - `argumentName` string, nullable, required
          - `argumentPosition` integer, nullable, required
          - `isRequired` boolean, nullable, required
          - `defaultValue` string, nullable, required
          - `argumentType` string, nullable, required
          - `validationRules` unknown, required
          - `parseOptions` unknown, required
          - `helpText` string, nullable, required
        - `socketSource` object, nullable, required
          - `socketType` string, nullable, required
          - `socketFamily` string, nullable, required
          - `protocol` string, nullable, required
          - `host` string, nullable, required
          - `port` integer, nullable, required
          - `socketPath` string, nullable, required
          - `permissions` string, nullable, required
          - `bindAddress` string, nullable, required
          - `socketOptions` unknown, required
          - `bufferSize` integer, nullable, required
          - `timeout` integer, nullable, required
        - `mobileDataSource` object, nullable, required
          - `description` string, required
        - `customSourceDeclarationId` string, nullable, required
        - `customSourceDeclaration` object, nullable, required
          - `id` string, required
          - `name` string, required
          - `description` string, required
          - `autoSelected` boolean, required
          - `rationale` string, nullable, required
          - `templatePack` object, nullable, required
            - `name` string, required
            - `slug` string, required
        - `type` 'http', required
      - object
        - `id` string, required
        - `name` string, required
        - `description` string, required
        - `authentication` string, nullable, required
        - `authorization` string, nullable, required
        - `location` object, nullable, required
          - `id` string, required
          - `filePath` string, required
          - `startLine` number, required
          - `endLine` number, required
          - `startColumn` number, nullable, required
          - `endColumn` number, nullable, required
          - `snippet` string, nullable, required
          - `snippetStart` number, nullable, required
          - `snippetEnd` number, nullable, required
          - `language` string, nullable, required
        - `encapsulatingFunction` object, nullable, required
          - `functionName` string, required
          - `isBuiltinFunction` boolean, required
          - `isExternalFunction` boolean, required
          - `isFromStdlib` boolean, required
          - `language` string, required
          - `libraryName` string, nullable, required
          - `astCodeRange` object, nullable, required
            - `id` string, required
            - `filePath` string, required
            - `startLine` number, required
            - `endLine` number, required
            - `startColumn` number, nullable, required
            - `endColumn` number, nullable, required
            - `snippet` string, nullable, required
            - `snippetStart` number, nullable, required
            - `snippetEnd` number, nullable, required
            - `language` string, nullable, required
        - `encapsulatingFile` object, nullable, required
          - `fileName` string, required
          - `language` string, required
        - `httpHandlerSource` object, nullable, required
          - `associatedRequestPath` string, nullable, required
          - `associatedRequestMethods` string[], required
        - `fileHandlerSource` object, required
          - `filePath` string, nullable, required
          - `filePattern` string, nullable, required
          - `filePermissions` string, nullable, required
        - `stdinHandlerSource` object, nullable, required
          - `authentication` string, nullable, required
          - `authorization` string, nullable, required
        - `browserDataSource` object, nullable, required
          - `sourceType` string, required
          - `domSelector` string, nullable, required
          - `eventType` string, nullable, required
          - `validationType` string, nullable, required
          - `dataFormat` string, nullable, required
          - `dataLifetime` string, nullable, required
        - `webSocketSource` object, nullable, required
          - `endpoint` string, nullable, required
          - `protocol` string, nullable, required
        - `cliArgumentSource` object, nullable, required
          - `argumentName` string, nullable, required
          - `argumentPosition` integer, nullable, required
          - `isRequired` boolean, nullable, required
          - `defaultValue` string, nullable, required
          - `argumentType` string, nullable, required
          - `validationRules` unknown, required
          - `parseOptions` unknown, required
          - `helpText` string, nullable, required
        - `socketSource` object, nullable, required
          - `socketType` string, nullable, required
          - `socketFamily` string, nullable, required
          - `protocol` string, nullable, required
          - `host` string, nullable, required
          - `port` integer, nullable, required
          - `socketPath` string, nullable, required
          - `permissions` string, nullable, required
          - `bindAddress` string, nullable, required
          - `socketOptions` unknown, required
          - `bufferSize` integer, nullable, required
          - `timeout` integer, nullable, required
        - `mobileDataSource` object, nullable, required
          - `description` string, required
        - `customSourceDeclarationId` string, nullable, required
        - `customSourceDeclaration` object, nullable, required
          - `id` string, required
          - `name` string, required
          - `description` string, required
          - `autoSelected` boolean, required
          - `rationale` string, nullable, required
          - `templatePack` object, nullable, required
            - `name` string, required
            - `slug` string, required
        - `type` 'disk', required
      - object
        - `id` string, required
        - `name` string, required
        - `description` string, required
        - `authentication` string, nullable, required
        - `authorization` string, nullable, required
        - `location` object, nullable, required
          - `id` string, required
          - `filePath` string, required
          - `startLine` number, required
          - `endLine` number, required
          - `startColumn` number, nullable, required
          - `endColumn` number, nullable, required
          - `snippet` string, nullable, required
          - `snippetStart` number, nullable, required
          - `snippetEnd` number, nullable, required
          - `language` string, nullable, required
        - `encapsulatingFunction` object, nullable, required
          - `functionName` string, required
          - `isBuiltinFunction` boolean, required
          - `isExternalFunction` boolean, required
          - `isFromStdlib` boolean, required
          - `language` string, required
          - `libraryName` string, nullable, required
          - `astCodeRange` object, nullable, required
            - `id` string, required
            - `filePath` string, required
            - `startLine` number, required
            - `endLine` number, required
            - `startColumn` number, nullable, required
            - `endColumn` number, nullable, required
            - `snippet` string, nullable, required
            - `snippetStart` number, nullable, required
            - `snippetEnd` number, nullable, required
            - `language` string, nullable, required
        - `encapsulatingFile` object, nullable, required
          - `fileName` string, required
          - `language` string, required
        - `httpHandlerSource` object, nullable, required
          - `associatedRequestPath` string, nullable, required
          - `associatedRequestMethods` string[], required
        - `fileHandlerSource` object, nullable, required
          - `filePath` string, nullable, required
          - `filePattern` string, nullable, required
          - `filePermissions` string, nullable, required
        - `stdinHandlerSource` object, required
          - `authentication` string, nullable, required
          - `authorization` string, nullable, required
        - `browserDataSource` object, nullable, required
          - `sourceType` string, required
          - `domSelector` string, nullable, required
          - `eventType` string, nullable, required
          - `validationType` string, nullable, required
          - `dataFormat` string, nullable, required
          - `dataLifetime` string, nullable, required
        - `webSocketSource` object, nullable, required
          - `endpoint` string, nullable, required
          - `protocol` string, nullable, required
        - `cliArgumentSource` object, nullable, required
          - `argumentName` string, nullable, required
          - `argumentPosition` integer, nullable, required
          - `isRequired` boolean, nullable, required
          - `defaultValue` string, nullable, required
          - `argumentType` string, nullable, required
          - `validationRules` unknown, required
          - `parseOptions` unknown, required
          - `helpText` string, nullable, required
        - `socketSource` object, nullable, required
          - `socketType` string, nullable, required
          - `socketFamily` string, nullable, required
          - `protocol` string, nullable, required
          - `host` string, nullable, required
          - `port` integer, nullable, required
          - `socketPath` string, nullable, required
          - `permissions` string, nullable, required
          - `bindAddress` string, nullable, required
          - `socketOptions` unknown, required
          - `bufferSize` integer, nullable, required
          - `timeout` integer, nullable, required
        - `mobileDataSource` object, nullable, required
          - `description` string, required
        - `customSourceDeclarationId` string, nullable, required
        - `customSourceDeclaration` object, nullable, required
          - `id` string, required
          - `name` string, required
          - `description` string, required
          - `autoSelected` boolean, required
          - `rationale` string, nullable, required
          - `templatePack` object, nullable, required
            - `name` string, required
            - `slug` string, required
        - `type` 'stdin', required
      - object
        - `id` string, required
        - `name` string, required
        - `description` string, required
        - `authentication` string, nullable, required
        - `authorization` string, nullable, required
        - `location` object, nullable, required
          - `id` string, required
          - `filePath` string, required
          - `startLine` number, required
          - `endLine` number, required
          - `startColumn` number, nullable, required
          - `endColumn` number, nullable, required
          - `snippet` string, nullable, required
          - `snippetStart` number, nullable, required
          - `snippetEnd` number, nullable, required
          - `language` string, nullable, required
        - `encapsulatingFunction` object, nullable, required
          - `functionName` string, required
          - `isBuiltinFunction` boolean, required
          - `isExternalFunction` boolean, required
          - `isFromStdlib` boolean, required
          - `language` string, required
          - `libraryName` string, nullable, required
          - `astCodeRange` object, nullable, required
            - `id` string, required
            - `filePath` string, required
            - `startLine` number, required
            - `endLine` number, required
            - `startColumn` number, nullable, required
            - `endColumn` number, nullable, required
            - `snippet` string, nullable, required
            - `snippetStart` number, nullable, required
            - `snippetEnd` number, nullable, required
            - `language` string, nullable, required
        - `encapsulatingFile` object, nullable, required
          - `fileName` string, required
          - `language` string, required
        - `httpHandlerSource` object, nullable, required
          - `associatedRequestPath` string, nullable, required
          - `associatedRequestMethods` string[], required
        - `fileHandlerSource` object, nullable, required
          - `filePath` string, nullable, required
          - `filePattern` string, nullable, required
          - `filePermissions` string, nullable, required
        - `stdinHandlerSource` object, nullable, required
          - `authentication` string, nullable, required
          - `authorization` string, nullable, required
        - `browserDataSource` object, required
          - `sourceType` string, required
          - `domSelector` string, nullable, required
          - `eventType` string, nullable, required
          - `validationType` string, nullable, required
          - `dataFormat` string, nullable, required
          - `dataLifetime` string, nullable, required
        - `webSocketSource` object, nullable, required
          - `endpoint` string, nullable, required
          - `protocol` string, nullable, required
        - `cliArgumentSource` object, nullable, required
          - `argumentName` string, nullable, required
          - `argumentPosition` integer, nullable, required
          - `isRequired` boolean, nullable, required
          - `defaultValue` string, nullable, required
          - `argumentType` string, nullable, required
          - `validationRules` unknown, required
          - `parseOptions` unknown, required
          - `helpText` string, nullable, required
        - `socketSource` object, nullable, required
          - `socketType` string, nullable, required
          - `socketFamily` string, nullable, required
          - `protocol` string, nullable, required
          - `host` string, nullable, required
          - `port` integer, nullable, required
          - `socketPath` string, nullable, required
          - `permissions` string, nullable, required
          - `bindAddress` string, nullable, required
          - `socketOptions` unknown, required
          - `bufferSize` integer, nullable, required
          - `timeout` integer, nullable, required
        - `mobileDataSource` object, nullable, required
          - `description` string, required
        - `customSourceDeclarationId` string, nullable, required
        - `customSourceDeclaration` object, nullable, required
          - `id` string, required
          - `name` string, required
          - `description` string, required
          - `autoSelected` boolean, required
          - `rationale` string, nullable, required
          - `templatePack` object, nullable, required
            - `name` string, required
            - `slug` string, required
        - `type` 'browser', required
      - object
        - `id` string, required
        - `name` string, required
        - `description` string, required
        - `authentication` string, nullable, required
        - `authorization` string, nullable, required
        - `location` object, nullable, required
          - `id` string, required
          - `filePath` string, required
          - `startLine` number, required
          - `endLine` number, required
          - `startColumn` number, nullable, required
          - `endColumn` number, nullable, required
          - `snippet` string, nullable, required
          - `snippetStart` number, nullable, required
          - `snippetEnd` number, nullable, required
          - `language` string, nullable, required
        - `encapsulatingFunction` object, nullable, required
          - `functionName` string, required
          - `isBuiltinFunction` boolean, required
          - `isExternalFunction` boolean, required
          - `isFromStdlib` boolean, required
          - `language` string, required
          - `libraryName` string, nullable, required
          - `astCodeRange` object, nullable, required
            - `id` string, required
            - `filePath` string, required
            - `startLine` number, required
            - `endLine` number, required
            - `startColumn` number, nullable, required
            - `endColumn` number, nullable, required
            - `snippet` string, nullable, required
            - `snippetStart` number, nullable, required
            - `snippetEnd` number, nullable, required
            - `language` string, nullable, required
        - `encapsulatingFile` object, nullable, required
          - `fileName` string, required
          - `language` string, required
        - `httpHandlerSource` object, nullable, required
          - `associatedRequestPath` string, nullable, required
          - `associatedRequestMethods` string[], required
        - `fileHandlerSource` object, nullable, required
          - `filePath` string, nullable, required
          - `filePattern` string, nullable, required
          - `filePermissions` string, nullable, required
        - `stdinHandlerSource` object, nullable, required
          - `authentication` string, nullable, required
          - `authorization` string, nullable, required
        - `browserDataSource` object, nullable, required
          - `sourceType` string, required
          - `domSelector` string, nullable, required
          - `eventType` string, nullable, required
          - `validationType` string, nullable, required
          - `dataFormat` string, nullable, required
          - `dataLifetime` string, nullable, required
        - `webSocketSource` object, required
          - `endpoint` string, nullable, required
          - `protocol` string, nullable, required
        - `cliArgumentSource` object, nullable, required
          - `argumentName` string, nullable, required
          - `argumentPosition` integer, nullable, required
          - `isRequired` boolean, nullable, required
          - `defaultValue` string, nullable, required
          - `argumentType` string, nullable, required
          - `validationRules` unknown, required
          - `parseOptions` unknown, required
          - `helpText` string, nullable, required
        - `socketSource` object, nullable, required
          - `socketType` string, nullable, required
          - `socketFamily` string, nullable, required
          - `protocol` string, nullable, required
          - `host` string, nullable, required
          - `port` integer, nullable, required
          - `socketPath` string, nullable, required
          - `permissions` string, nullable, required
          - `bindAddress` string, nullable, required
          - `socketOptions` unknown, required
          - `bufferSize` integer, nullable, required
          - `timeout` integer, nullable, required
        - `mobileDataSource` object, nullable, required
          - `description` string, required
        - `customSourceDeclarationId` string, nullable, required
        - `customSourceDeclaration` object, nullable, required
          - `id` string, required
          - `name` string, required
          - `description` string, required
          - `autoSelected` boolean, required
          - `rationale` string, nullable, required
          - `templatePack` object, nullable, required
            - `name` string, required
            - `slug` string, required
        - `type` 'ws', required
      - object
        - `id` string, required
        - `name` string, required
        - `description` string, required
        - `authentication` string, nullable, required
        - `authorization` string, nullable, required
        - `location` object, nullable, required
          - `id` string, required
          - `filePath` string, required
          - `startLine` number, required
          - `endLine` number, required
          - `startColumn` number, nullable, required
          - `endColumn` number, nullable, required
          - `snippet` string, nullable, required
          - `snippetStart` number, nullable, required
          - `snippetEnd` number, nullable, required
          - `language` string, nullable, required
        - `encapsulatingFunction` object, nullable, required
          - `functionName` string, required
          - `isBuiltinFunction` boolean, required
          - `isExternalFunction` boolean, required
          - `isFromStdlib` boolean, required
          - `language` string, required
          - `libraryName` string, nullable, required
          - `astCodeRange` object, nullable, required
            - `id` string, required
            - `filePath` string, required
            - `startLine` number, required
            - `endLine` number, required
            - `startColumn` number, nullable, required
            - `endColumn` number, nullable, required
            - `snippet` string, nullable, required
            - `snippetStart` number, nullable, required
            - `snippetEnd` number, nullable, required
            - `language` string, nullable, required
        - `encapsulatingFile` object, nullable, required
          - `fileName` string, required
          - `language` string, required
        - `httpHandlerSource` object, nullable, required
          - `associatedRequestPath` string, nullable, required
          - `associatedRequestMethods` string[], required
        - `fileHandlerSource` object, nullable, required
          - `filePath` string, nullable, required
          - `filePattern` string, nullable, required
          - `filePermissions` string, nullable, required
        - `stdinHandlerSource` object, nullable, required
          - `authentication` string, nullable, required
          - `authorization` string, nullable, required
        - `browserDataSource` object, nullable, required
          - `sourceType` string, required
          - `domSelector` string, nullable, required
          - `eventType` string, nullable, required
          - `validationType` string, nullable, required
          - `dataFormat` string, nullable, required
          - `dataLifetime` string, nullable, required
        - `webSocketSource` object, nullable, required
          - `endpoint` string, nullable, required
          - `protocol` string, nullable, required
        - `cliArgumentSource` object, nullable, required
          - `argumentName` string, nullable, required
          - `argumentPosition` integer, nullable, required
          - `isRequired` boolean, nullable, required
          - `defaultValue` string, nullable, required
          - `argumentType` string, nullable, required
          - `validationRules` unknown, required
          - `parseOptions` unknown, required
          - `helpText` string, nullable, required
        - `socketSource` object, required
          - `socketType` string, nullable, required
          - `socketFamily` string, nullable, required
          - `protocol` string, nullable, required
          - `host` string, nullable, required
          - `port` integer, nullable, required
          - `socketPath` string, nullable, required
          - `permissions` string, nullable, required
          - `bindAddress` string, nullable, required
          - `socketOptions` unknown, required
          - `bufferSize` integer, nullable, required
          - `timeout` integer, nullable, required
        - `mobileDataSource` object, nullable, required
          - `description` string, required
        - `customSourceDeclarationId` string, nullable, required
        - `customSourceDeclaration` object, nullable, required
          - `id` string, required
          - `name` string, required
          - `description` string, required
          - `autoSelected` boolean, required
          - `rationale` string, nullable, required
          - `templatePack` object, nullable, required
            - `name` string, required
            - `slug` string, required
        - `type` 'socket', required
      - object
        - `id` string, required
        - `name` string, required
        - `description` string, required
        - `authentication` string, nullable, required
        - `authorization` string, nullable, required
        - `location` object, nullable, required
          - `id` string, required
          - `filePath` string, required
          - `startLine` number, required
          - `endLine` number, required
          - `startColumn` number, nullable, required
          - `endColumn` number, nullable, required
          - `snippet` string, nullable, required
          - `snippetStart` number, nullable, required
          - `snippetEnd` number, nullable, required
          - `language` string, nullable, required
        - `encapsulatingFunction` object, nullable, required
          - `functionName` string, required
          - `isBuiltinFunction` boolean, required
          - `isExternalFunction` boolean, required
          - `isFromStdlib` boolean, required
          - `language` string, required
          - `libraryName` string, nullable, required
          - `astCodeRange` object, nullable, required
            - `id` string, required
            - `filePath` string, required
            - `startLine` number, required
            - `endLine` number, required
            - `startColumn` number, nullable, required
            - `endColumn` number, nullable, required
            - `snippet` string, nullable, required
            - `snippetStart` number, nullable, required
            - `snippetEnd` number, nullable, required
            - `language` string, nullable, required
        - `encapsulatingFile` object, nullable, required
          - `fileName` string, required
          - `language` string, required
        - `httpHandlerSource` object, nullable, required
          - `associatedRequestPath` string, nullable, required
          - `associatedRequestMethods` string[], required
        - `fileHandlerSource` object, nullable, required
          - `filePath` string, nullable, required
          - `filePattern` string, nullable, required
          - `filePermissions` string, nullable, required
        - `stdinHandlerSource` object, nullable, required
          - `authentication` string, nullable, required
          - `authorization` string, nullable, required
        - `browserDataSource` object, nullable, required
          - `sourceType` string, required
          - `domSelector` string, nullable, required
          - `eventType` string, nullable, required
          - `validationType` string, nullable, required
          - `dataFormat` string, nullable, required
          - `dataLifetime` string, nullable, required
        - `webSocketSource` object, nullable, required
          - `endpoint` string, nullable, required
          - `protocol` string, nullable, required
        - `cliArgumentSource` object, required
          - `argumentName` string, nullable, required
          - `argumentPosition` integer, nullable, required
          - `isRequired` boolean, nullable, required
          - `defaultValue` string, nullable, required
          - `argumentType` string, nullable, required
          - `validationRules` unknown, required
          - `parseOptions` unknown, required
          - `helpText` string, nullable, required
        - `socketSource` object, nullable, required
          - `socketType` string, nullable, required
          - `socketFamily` string, nullable, required
          - `protocol` string, nullable, required
          - `host` string, nullable, required
          - `port` integer, nullable, required
          - `socketPath` string, nullable, required
          - `permissions` string, nullable, required
          - `bindAddress` string, nullable, required
          - `socketOptions` unknown, required
          - `bufferSize` integer, nullable, required
          - `timeout` integer, nullable, required
        - `mobileDataSource` object, nullable, required
          - `description` string, required
        - `customSourceDeclarationId` string, nullable, required
        - `customSourceDeclaration` object, nullable, required
          - `id` string, required
          - `name` string, required
          - `description` string, required
          - `autoSelected` boolean, required
          - `rationale` string, nullable, required
          - `templatePack` object, nullable, required
            - `name` string, required
            - `slug` string, required
        - `type` 'cli', required
      - object
        - `id` string, required
        - `name` string, required
        - `description` string, required
        - `authentication` string, nullable, required
        - `authorization` string, nullable, required
        - `location` object, nullable, required
          - `id` string, required
          - `filePath` string, required
          - `startLine` number, required
          - `endLine` number, required
          - `startColumn` number, nullable, required
          - `endColumn` number, nullable, required
          - `snippet` string, nullable, required
          - `snippetStart` number, nullable, required
          - `snippetEnd` number, nullable, required
          - `language` string, nullable, required
        - `encapsulatingFunction` object, nullable, required
          - `functionName` string, required
          - `isBuiltinFunction` boolean, required
          - `isExternalFunction` boolean, required
          - `isFromStdlib` boolean, required
          - `language` string, required
          - `libraryName` string, nullable, required
          - `astCodeRange` object, nullable, required
            - `id` string, required
            - `filePath` string, required
            - `startLine` number, required
            - `endLine` number, required
            - `startColumn` number, nullable, required
            - `endColumn` number, nullable, required
            - `snippet` string, nullable, required
            - `snippetStart` number, nullable, required
            - `snippetEnd` number, nullable, required
            - `language` string, nullable, required
        - `encapsulatingFile` object, nullable, required
          - `fileName` string, required
          - `language` string, required
        - `httpHandlerSource` object, nullable, required
          - `associatedRequestPath` string, nullable, required
          - `associatedRequestMethods` string[], required
        - `fileHandlerSource` object, nullable, required
          - `filePath` string, nullable, required
          - `filePattern` string, nullable, required
          - `filePermissions` string, nullable, required
        - `stdinHandlerSource` object, nullable, required
          - `authentication` string, nullable, required
          - `authorization` string, nullable, required
        - `browserDataSource` object, nullable, required
          - `sourceType` string, required
          - `domSelector` string, nullable, required
          - `eventType` string, nullable, required
          - `validationType` string, nullable, required
          - `dataFormat` string, nullable, required
          - `dataLifetime` string, nullable, required
        - `webSocketSource` object, nullable, required
          - `endpoint` string, nullable, required
          - `protocol` string, nullable, required
        - `cliArgumentSource` object, nullable, required
          - `argumentName` string, nullable, required
          - `argumentPosition` integer, nullable, required
          - `isRequired` boolean, nullable, required
          - `defaultValue` string, nullable, required
          - `argumentType` string, nullable, required
          - `validationRules` unknown, required
          - `parseOptions` unknown, required
          - `helpText` string, nullable, required
        - `socketSource` object, nullable, required
          - `socketType` string, nullable, required
          - `socketFamily` string, nullable, required
          - `protocol` string, nullable, required
          - `host` string, nullable, required
          - `port` integer, nullable, required
          - `socketPath` string, nullable, required
          - `permissions` string, nullable, required
          - `bindAddress` string, nullable, required
          - `socketOptions` unknown, required
          - `bufferSize` integer, nullable, required
          - `timeout` integer, nullable, required
        - `mobileDataSource` object, required
          - `description` string, required
        - `customSourceDeclarationId` string, nullable, required
        - `customSourceDeclaration` object, nullable, required
          - `id` string, required
          - `name` string, required
          - `description` string, required
          - `autoSelected` boolean, required
          - `rationale` string, nullable, required
          - `templatePack` object, nullable, required
            - `name` string, required
            - `slug` string, required
        - `type` 'mobile', required
      - object
        - `id` string, required
        - `name` string, required
        - `description` string, required
        - `authentication` string, nullable, required
        - `authorization` string, nullable, required
        - `location` object, nullable, required
          - `id` string, required
          - `filePath` string, required
          - `startLine` number, required
          - `endLine` number, required
          - `startColumn` number, nullable, required
          - `endColumn` number, nullable, required
          - `snippet` string, nullable, required
          - `snippetStart` number, nullable, required
          - `snippetEnd` number, nullable, required
          - `language` string, nullable, required
        - `encapsulatingFunction` object, nullable, required
          - `functionName` string, required
          - `isBuiltinFunction` boolean, required
          - `isExternalFunction` boolean, required
          - `isFromStdlib` boolean, required
          - `language` string, required
          - `libraryName` string, nullable, required
          - `astCodeRange` object, nullable, required
            - `id` string, required
            - `filePath` string, required
            - `startLine` number, required
            - `endLine` number, required
            - `startColumn` number, nullable, required
            - `endColumn` number, nullable, required
            - `snippet` string, nullable, required
            - `snippetStart` number, nullable, required
            - `snippetEnd` number, nullable, required
            - `language` string, nullable, required
        - `encapsulatingFile` object, nullable, required
          - `fileName` string, required
          - `language` string, required
        - `httpHandlerSource` object, nullable, required
          - `associatedRequestPath` string, nullable, required
          - `associatedRequestMethods` string[], required
        - `fileHandlerSource` object, nullable, required
          - `filePath` string, nullable, required
          - `filePattern` string, nullable, required
          - `filePermissions` string, nullable, required
        - `stdinHandlerSource` object, nullable, required
          - `authentication` string, nullable, required
          - `authorization` string, nullable, required
        - `browserDataSource` object, nullable, required
          - `sourceType` string, required
          - `domSelector` string, nullable, required
          - `eventType` string, nullable, required
          - `validationType` string, nullable, required
          - `dataFormat` string, nullable, required
          - `dataLifetime` string, nullable, required
        - `webSocketSource` object, nullable, required
          - `endpoint` string, nullable, required
          - `protocol` string, nullable, required
        - `cliArgumentSource` object, nullable, required
          - `argumentName` string, nullable, required
          - `argumentPosition` integer, nullable, required
          - `isRequired` boolean, nullable, required
          - `defaultValue` string, nullable, required
          - `argumentType` string, nullable, required
          - `validationRules` unknown, required
          - `parseOptions` unknown, required
          - `helpText` string, nullable, required
        - `socketSource` object, nullable, required
          - `socketType` string, nullable, required
          - `socketFamily` string, nullable, required
          - `protocol` string, nullable, required
          - `host` string, nullable, required
          - `port` integer, nullable, required
          - `socketPath` string, nullable, required
          - `permissions` string, nullable, required
          - `bindAddress` string, nullable, required
          - `socketOptions` unknown, required
          - `bufferSize` integer, nullable, required
          - `timeout` integer, nullable, required
        - `mobileDataSource` object, nullable, required
          - `description` string, required
        - `customSourceDeclarationId` string, required
        - `customSourceDeclaration` object, required
          - `id` string, required
          - `name` string, required
          - `description` string, required
          - `autoSelected` boolean, required
          - `rationale` string, nullable, required
          - `templatePack` object, nullable, required
            - `name` string, required
            - `slug` string, required
        - `type` 'custom', required
      - object
        - `id` string, required
        - `name` string, required
        - `description` string, required
        - `authentication` string, nullable, required
        - `authorization` string, nullable, required
        - `location` object, nullable, required
          - `id` string, required
          - `filePath` string, required
          - `startLine` number, required
          - `endLine` number, required
          - `startColumn` number, nullable, required
          - `endColumn` number, nullable, required
          - `snippet` string, nullable, required
          - `snippetStart` number, nullable, required
          - `snippetEnd` number, nullable, required
          - `language` string, nullable, required
        - `encapsulatingFunction` object, nullable, required
          - `functionName` string, required
          - `isBuiltinFunction` boolean, required
          - `isExternalFunction` boolean, required
          - `isFromStdlib` boolean, required
          - `language` string, required
          - `libraryName` string, nullable, required
          - `astCodeRange` object, nullable, required
            - `id` string, required
            - `filePath` string, required
            - `startLine` number, required
            - `endLine` number, required
            - `startColumn` number, nullable, required
            - `endColumn` number, nullable, required
            - `snippet` string, nullable, required
            - `snippetStart` number, nullable, required
            - `snippetEnd` number, nullable, required
            - `language` string, nullable, required
        - `encapsulatingFile` object, nullable, required
          - `fileName` string, required
          - `language` string, required
        - `httpHandlerSource` object, nullable, required
          - `associatedRequestPath` string, nullable, required
          - `associatedRequestMethods` string[], required
        - `fileHandlerSource` object, nullable, required
          - `filePath` string, nullable, required
          - `filePattern` string, nullable, required
          - `filePermissions` string, nullable, required
        - `stdinHandlerSource` object, nullable, required
          - `authentication` string, nullable, required
          - `authorization` string, nullable, required
        - `browserDataSource` object, nullable, required
          - `sourceType` string, required
          - `domSelector` string, nullable, required
          - `eventType` string, nullable, required
          - `validationType` string, nullable, required
          - `dataFormat` string, nullable, required
          - `dataLifetime` string, nullable, required
        - `webSocketSource` object, nullable, required
          - `endpoint` string, nullable, required
          - `protocol` string, nullable, required
        - `cliArgumentSource` object, nullable, required
          - `argumentName` string, nullable, required
          - `argumentPosition` integer, nullable, required
          - `isRequired` boolean, nullable, required
          - `defaultValue` string, nullable, required
          - `argumentType` string, nullable, required
          - `validationRules` unknown, required
          - `parseOptions` unknown, required
          - `helpText` string, nullable, required
        - `socketSource` object, nullable, required
          - `socketType` string, nullable, required
          - `socketFamily` string, nullable, required
          - `protocol` string, nullable, required
          - `host` string, nullable, required
          - `port` integer, nullable, required
          - `socketPath` string, nullable, required
          - `permissions` string, nullable, required
          - `bindAddress` string, nullable, required
          - `socketOptions` unknown, required
          - `bufferSize` integer, nullable, required
          - `timeout` integer, nullable, required
        - `mobileDataSource` object, nullable, required
          - `description` string, required
        - `customSourceDeclarationId` string, nullable, required
        - `customSourceDeclaration` object, nullable, required
          - `id` string, required
          - `name` string, required
          - `description` string, required
          - `autoSelected` boolean, required
          - `rationale` string, nullable, required
          - `templatePack` object, nullable, required
            - `name` string, required
            - `slug` string, required
        - `type` 'unknown', required
    - `associatedSink` object, nullable, required
      - `id` string, required
      - `description` string, required
      - `location` object, required
        - `id` string, required
        - `filePath` string, required
        - `startLine` number, required
        - `endLine` number, required
        - `startColumn` number, nullable, required
        - `endColumn` number, nullable, required
        - `snippet` string, nullable, required
        - `snippetStart` number, nullable, required
        - `snippetEnd` number, nullable, required
        - `language` string, nullable, required
      - `customSinkDeclarationId` string, nullable, required
      - `customSinkDeclaration` object, nullable, required
        - `id` string, required
        - `name` string, required
        - `description` string, required
        - `autoSelected` boolean, required
        - `rationale` string, nullable, required
        - `templatePack` object, nullable, required
          - `name` string, required
          - `slug` string, required
    - `dataFlowNodes` object[], required
      - `id` string, required
      - `nodeOrder` integer, required
      - `annotation` string, required
      - `nodeCodeRange` object, required
        - `id` string, required
        - `filePath` string, required
        - `startLine` number, required
        - `endLine` number, required
        - `startColumn` number, nullable, required
        - `endColumn` number, nullable, required
        - `snippet` string, nullable, required
        - `snippetStart` number, nullable, required
        - `snippetEnd` number, nullable, required
        - `language` string, nullable, required
      - `highlights` object[], required
        - `id` string, required
        - `annotation` string, nullable, required
        - `astCodeRange` object, required
          - `id` string, required
          - `filePath` string, required
          - `startLine` number, required
          - `endLine` number, required
          - `startColumn` number, nullable, required
          - `endColumn` number, nullable, required
          - `snippet` string, nullable, required
          - `snippetStart` number, nullable, required
          - `snippetEnd` number, nullable, required
          - `language` string, nullable, required
  - `gitBlameAuthors` object[], required
    - `lineStart` number, nullable, required
    - `lineEnd` number, nullable, required
    - `timestamp` string, nullable, required
    - `contributor` object, nullable, required
      - `id` string, nullable, required
      - `userId` string, nullable, required
      - `name` string, nullable, required
      - `email` string, nullable, required
      - `platform` string, nullable, required
      - `username` string, nullable, required
      - `profileUrl` string, nullable, required
      - `profileImageUrl` string, nullable, required
  - `introducedBy` object, nullable, required
    - `contributorId` string, nullable, required
    - `userId` string, nullable, required
    - `name` string, nullable, required
    - `email` string, nullable, required
    - `platform` string, nullable, required
    - `username` string, nullable, required
    - `profileUrl` string, nullable, required
    - `profileImageUrl` string, nullable, required
    - `lineStart` number, nullable, required
    - `lineEnd` number, nullable, required
    - `timestamp` string, nullable, required
  - `closedBy` object, nullable, required
    - `id` string, required
    - `fName` string, nullable, required
    - `lName` string, nullable, required
    - `email` string, required
  - `prescreenReasoning` object, nullable, required
    - `id` string, required
    - `reasoning` string, required
  - `agentReasoningSteps` object, nullable, required
    - `id` string, required
    - `reasoningStepsOverview` string, required
    - `reasoningSteps` object[], required
      - `id` string, required
      - `stepNo` number, required
      - `action` string, required
      - `summarizedStep` string, required
      - `isDisplay` boolean, required
  - `detectedSecret` object, nullable, required
    - `detectorName` string, nullable, required
    - `detectorDescription` string, nullable, required
    - `decoderName` string, nullable, required
    - `rotationGuide` string, nullable, required
    - `redactedSecret` string, nullable, required
    - `verified` boolean, required
  - `pocCode` string, nullable, required
  - `pocCanBeCreated` boolean, required
  - `pocReasoning` string, nullable, required
  - `pocGeneration` object, nullable, required
    - `id` string, required
    - `pocCode` string, required
    - `generatedAt` string, required
    - `processingTimeMs` integer, nullable, required
  - `stagedPocGeneration` object, nullable, required
    - `id` string, required
    - `startedAt` string, nullable, required
    - `hasResult` boolean, required
    - `error` string, nullable, required
    - `createdAt` string, required
  - `investigation` object, nullable, required
    - `id` string, required
    - `status` 'PENDING' | 'PROCESSING' | 'COMPLETED' | 'FAILED', required
    - `startedAt` string, nullable, required
    - `completedAt` string, nullable, required
    - `resultValidated` string, nullable, required
    - `resultSecurityAssessment` string, nullable, required
    - `transitiveGuardVerdict` string, nullable, required
    - `transitiveGuardReason` string, nullable, required
    - `error` string, nullable, required
    - `modelTier` string, nullable, required
    - `createdAt` string, required
  - `patchAttemptErrorDuringScan` object, nullable, required
    - `id` string, required
    - `rawError` unknown, required
    - `displayError` string, nullable, required
    - `errorType` string, nullable, required
    - `createdAt` string, required
  - `prSubmissionErrorDuringScan` object, nullable, required
    - `id` string, required
    - `rawError` unknown, required
    - `displayError` string, nullable, required
    - `errorType` string, nullable, required
    - `createdAt` string, required
  - `vulnerabilityPatch` object, nullable, required
    - `id` string, required
    - `prLink` string, nullable, required
    - `prTitle` string, nullable, required
    - `prDescription` string, nullable, required
    - `gitDiff` string, nullable, required
    - `pullRequestStatus` 'PENDING' | 'ACCEPTED' | 'DENIED', required
    - `localBranch` string, nullable, required
    - `validated` 'CONFIRMED' | 'DISCONFIRMED' | 'UNKNOWN', required
    - `createdAt` string, required
    - `updatedAt` string, required
    - `error` string, nullable, required
    - `blastRadiusReport` object, nullable, required
      - `version` 1, required
      - `package` string, required
      - `ecosystem` string, required
      - `from` string, required
      - `to` string, required
      - `api_delta` object, required
        - `source` 'deterministic' | 'changelog' | 'agentic', required
        - `added` string[], required
        - `removed` string[], required
        - `signature_changed` object[], required
          - `symbol` string, required
          - `before` string, required
          - `after` string, required
      - `call_sites` object[], required
        - `file` string, required
        - `line` integer, required
        - `col` integer, required
        - `symbol` string, required
        - `import_form` string, nullable, required
        - `excerpt` string, required
      - `classifications` object[], required
        - `site_idx` integer, required
        - `risk` 'safe' | 'needs-review' | 'breaking', required
        - `reason` string, required
      - `summary` object, required
        - `safe` integer, required
        - `needs_review` integer, required
        - `breaking` integer, required
      - `truncation` object
        - `total_sites` integer, required
        - `stored` integer, required
        - `dropped` object, required
          - `unclassified` integer, required
    - `prSubmission` union, required
      - object
        - `state` 'QUEUED', required
        - `request` object, required
          - `id` string, required
          - `requestedBy` 'USER' | 'AGENT' | 'VCS_BOT' | 'SCAN_AUTO_PR' | 'MIGRATED_LEGACY_QUEUE', required
          - `requestedAt` string, required
          - `attempts` integer, required
      - object
        - `state` 'IN_PROGRESS', required
        - `request` object, required
          - `id` string, required
          - `requestedBy` 'USER' | 'AGENT' | 'VCS_BOT' | 'SCAN_AUTO_PR' | 'MIGRATED_LEGACY_QUEUE', required
          - `requestedAt` string, required
          - `attempts` integer, required
        - `stage` 'ASSIGNED' | 'PREPARING_REPOSITORY' | 'PUSHING_BRANCH' | 'OPENING_PULL_REQUEST', required
      - object
        - `state` 'RETRY_SCHEDULED', required
        - `request` object, required
          - `id` string, required
          - `requestedBy` 'USER' | 'AGENT' | 'VCS_BOT' | 'SCAN_AUTO_PR' | 'MIGRATED_LEGACY_QUEUE', required
          - `requestedAt` string, required
          - `attempts` integer, required
        - `nextAttemptAt` string, required
        - `lastError` string, nullable, required
      - object
        - `state` 'SUCCEEDED', required
        - `request` object, nullable, required
          - `id` string, required
          - `requestedBy` 'USER' | 'AGENT' | 'VCS_BOT' | 'SCAN_AUTO_PR' | 'MIGRATED_LEGACY_QUEUE', required
          - `requestedAt` string, required
          - `attempts` integer, required
        - `prLink` string, required
      - object
        - `state` 'FAILED', required
        - `request` object, required
          - `id` string, required
          - `requestedBy` 'USER' | 'AGENT' | 'VCS_BOT' | 'SCAN_AUTO_PR' | 'MIGRATED_LEGACY_QUEUE', required
          - `requestedAt` string, required
          - `attempts` integer, required
        - `failureReason` 'FORK_PULL_REQUEST' | 'REPOSITORY_ARCHIVED' | 'MISSING_PUSH_CREDENTIALS' | 'REPOSITORY_NOT_LINKED' | 'UNSUPPORTED_REPOSITORY' | 'RETRIES_EXHAUSTED' | 'EXPIRED_BEFORE_SUBMISSION', required
        - `lastError` string, nullable, required
        - `completedAt` string, required
      - object
        - `state` 'CANCELLED', required
        - `request` object, required
          - `id` string, required
          - `requestedBy` 'USER' | 'AGENT' | 'VCS_BOT' | 'SCAN_AUTO_PR' | 'MIGRATED_LEGACY_QUEUE', required
          - `requestedAt` string, required
          - `attempts` integer, required
        - `completedAt` string, required
  - `patchCandidates` object[], required
    - `id` string, required
    - `variantIndex` integer, required
    - `prTitle` string, required
    - `prDescription` string, required
    - `gitDiff` string, required
    - `blastRadiusReport` object, nullable, required
      - `version` 1, required
      - `package` string, required
      - `ecosystem` string, required
      - `from` string, required
      - `to` string, required
      - `api_delta` object, required
        - `source` 'deterministic' | 'changelog' | 'agentic', required
        - `added` string[], required
        - `removed` string[], required
        - `signature_changed` object[], required
          - `symbol` string, required
          - `before` string, required
          - `after` string, required
      - `call_sites` object[], required
        - `file` string, required
        - `line` integer, required
        - `col` integer, required
        - `symbol` string, required
        - `import_form` string, nullable, required
        - `excerpt` string, required
      - `classifications` object[], required
        - `site_idx` integer, required
        - `risk` 'safe' | 'needs-review' | 'breaking', required
        - `reason` string, required
      - `summary` object, required
        - `safe` integer, required
        - `needs_review` integer, required
        - `breaking` integer, required
      - `truncation` object
        - `total_sites` integer, required
        - `stored` integer, required
        - `dropped` object, required
          - `unclassified` integer, required
    - `createdAt` string, required
  - `patchGenerationRequestView` union, required
    - object
      - `state` 'QUEUED', required
      - `request` object, required
        - `id` string, required
        - `requestedAt` string, required
        - `dependencyUpgrade` union
          - object
            - `schemaVersion` 2, required
            - `repositoryId` string, required
            - `packageName` string, required
            - `currentVersion` string, required
            - `ecosystem` string, required
            - `advisoryIds` string[], required
            - `scanId` string
            - `branchName` string
          - object
            - `schemaVersion` 1, required
            - `repositoryId` string, required
            - `packageName` string, required
            - `currentVersion` string, required
            - `ecosystem` string, required
            - `advisoryIds` string[], required
            - `scanId` string
            - `branchName` string
            - `targetVersion` string, required
      - `workerAssignment` unknown, required
      - `finalResult` unknown, required
    - object
      - `state` 'IN_PROGRESS', required
      - `request` object, required
        - `id` string, required
        - `requestedAt` string, required
        - `dependencyUpgrade` union
          - object
            - `schemaVersion` 2, required
            - `repositoryId` string, required
            - `packageName` string, required
            - `currentVersion` string, required
            - `ecosystem` string, required
            - `advisoryIds` string[], required
            - `scanId` string
            - `branchName` string
          - object
            - `schemaVersion` 1, required
            - `repositoryId` string, required
            - `packageName` string, required
            - `currentVersion` string, required
            - `ecosystem` string, required
            - `advisoryIds` string[], required
            - `scanId` string
            - `branchName` string
            - `targetVersion` string, required
      - `workerAssignment` object, required
        - `workerId` string, required
        - `assignedAt` string, required
        - `stage` 'ASSIGNED' | 'PREPARING_REPOSITORY' | 'GENERATING_FIX' | 'FINALIZING', required
      - `finalResult` unknown, required
    - object
      - `state` 'SUCCEEDED', required
      - `request` object, required
        - `id` string, required
        - `requestedAt` string, required
        - `dependencyUpgrade` union
          - object
            - `schemaVersion` 2, required
            - `repositoryId` string, required
            - `packageName` string, required
            - `currentVersion` string, required
            - `ecosystem` string, required
            - `advisoryIds` string[], required
            - `scanId` string
            - `branchName` string
          - object
            - `schemaVersion` 1, required
            - `repositoryId` string, required
            - `packageName` string, required
            - `currentVersion` string, required
            - `ecosystem` string, required
            - `advisoryIds` string[], required
            - `scanId` string
            - `branchName` string
            - `targetVersion` string, required
      - `workerAssignment` object, nullable, required
        - `workerId` string, required
        - `assignedAt` string, required
        - `stage` 'ASSIGNED' | 'PREPARING_REPOSITORY' | 'GENERATING_FIX' | 'FINALIZING', required
      - `finalResult` object, required
        - `completedAt` string, required
        - `error` unknown, required
    - object
      - `state` 'FAILED', required
      - `request` object, required
        - `id` string, required
        - `requestedAt` string, required
        - `dependencyUpgrade` union
          - object
            - `schemaVersion` 2, required
            - `repositoryId` string, required
            - `packageName` string, required
            - `currentVersion` string, required
            - `ecosystem` string, required
            - `advisoryIds` string[], required
            - `scanId` string
            - `branchName` string
          - object
            - `schemaVersion` 1, required
            - `repositoryId` string, required
            - `packageName` string, required
            - `currentVersion` string, required
            - `ecosystem` string, required
            - `advisoryIds` string[], required
            - `scanId` string
            - `branchName` string
            - `targetVersion` string, required
      - `workerAssignment` object, nullable, required
        - `workerId` string, required
        - `assignedAt` string, required
        - `stage` 'ASSIGNED' | 'PREPARING_REPOSITORY' | 'GENERATING_FIX' | 'FINALIZING', required
      - `finalResult` object, required
        - `completedAt` string, required
        - `error` string, required
  - `runtimeValidation` object, nullable, required
    - `id` string, required
    - `run` object, required
      - `id` string, required
      - `status` 'PENDING' | 'PROCESSING' | 'COMPLETED' | 'FAILED' | 'CANCELLED', required
      - `triggerReason` 'USER_REQUESTED' | 'AUTO_AFTER_SCAN', required
      - `scope` 'FULL_APPLICATION' | 'SELECTED_ISSUES'
      - `targetIssueCount` integer
      - `createdAt` string, required
      - `completedAt` string, nullable, required
    - `verdict` 'CONFIRMED' | 'DISCONFIRMED' | 'UNTESTABLE' | 'AGENT_ERROR', required
    - `isDynamicallyTestable` boolean, required
    - `testabilityReasoning` string, required
    - `validationReasoning` string, nullable, required
    - `evidenceSummary` string, nullable, required
    - `validationSteps` object[], required
- … truncated; see the full OpenAPI document linked below

---

[API](https://skmtc.dev/zeropath/apis/zeropath-api.md) - [All operations](https://skmtc.dev/zeropath/apis/zeropath-api/llms.txt) - [OpenAPI document](https://skmtc.dev/zeropath/apis/zeropath-api/revisions/126e9c80ba0d?raw)
