---
title: "Start runtime validation"
method: POST
path: "/api/v2/runtimeValidation/startValidation"
tags: ["Runtime Validation"]
---

# Start runtime validation

`POST /api/v2/runtimeValidation/startValidation`

## Request

- Base URL: `https://zeropath.com`
- URL: `https://zeropath.com/api/v2/runtimeValidation/startValidation`
- Auth: API key in header `X-ZeroPath-API-Token-Id` and API key in header `X-ZeroPath-API-Token-Secret`

Create a USER_REQUESTED runtime validation run for a READY application profile and a completed full scan from the same repository. Omit targetIssueIds for a full-application run, or pass ids returned by runtimeValidation.listEligibleIssues for a selected-issue run. The API rejects duplicate pending or processing runs for the same profile and scan.

## Request body

- RuntimeValidationStartValidationRequest
  - `organizationId` string
  - `profileId` string, required
  - `codeScanId` string, required: Completed successful FullScan id from the same repository as the runtime validation profile.
  - `targetIssueIds` string[]: Optional active SAST issue ids to validate. Omit or pass an empty array to validate the full application.

## Response `200`

Created validation run

- RuntimeValidationRunSummary
  - `id` string, required
  - `profileId` string, required
  - `codeScanId` string, required
  - `status` 'PENDING' | 'PROCESSING' | 'COMPLETED' | 'FAILED' | 'CANCELLED', required: Queue and lifecycle status for a runtime validation run.
  - `triggerReason` 'USER_REQUESTED' | 'AUTO_AFTER_SCAN', required: Why the validation run was created.
  - `triggeredByUserId` string, nullable, required
  - `startedAt` string, date-time, nullable, required
  - `completedAt` string, date-time, nullable, required
  - `cancelledAt` string, date-time, nullable, required
  - `summary` string, nullable, required
  - `createdAt` string, date-time, required
  - `updatedAt` string, date-time, required

## Other responses

- `400`: Error Response
- `401`: Error Response
- `403`: Error Response
- `404`: Error Response
- `409`: Error Response
- `412`: Error Response

---

[API](https://skmtc.dev/zeropath/apis/zeropath-api.md) - [All operations](https://skmtc.dev/zeropath/apis/zeropath-api/llms.txt) - [OpenAPI document](https://skmtc.dev/zeropath/apis/zeropath-api/revisions/126e9c80ba0d?raw)
