---
title: "List SCA coverage warnings"
method: POST
path: "/api/v2/sca/listWarnings"
tags: ["SCA"]
---

# List SCA coverage warnings

`POST /api/v2/sca/listWarnings`

## Request

- Base URL: `https://zeropath.com`
- URL: `https://zeropath.com/api/v2/sca/listWarnings`
- Auth: API key in header `X-ZeroPath-API-Token-Id` and API key in header `X-ZeroPath-API-Token-Secret`

List dependency-resolution coverage warnings for your repositories. A warning marks a manifest whose dependency tree could not be fully resolved, so the scan may have missed transitive (or, for some ecosystems, direct) dependencies. Types include SCA_MISSING_LOCKFILE, SCA_RESOLUTION_FAILED, SCA_TRANSITIVES_UNRESOLVED, and SCA_ZERO_RESULTS_ANOMALY. Each warning gives the manifest `file`, a user-facing `displayMessage`, and a diagnostic `rawMessage` containing the recorded reason. Defaults to active (unresolved) warnings; pass `includeResolved` for history. Use this to find where dependency coverage is incomplete and what to fix.

## Request body

- ScaListWarningsRequest: Input for listing SCA dependency-resolution coverage warnings.
  - `organizationId` string, required: Organization to list coverage warnings for.
  - `repositoryIds` string[]: Restrict results to these repositories. If omitted, returns warnings across all repositories the caller can access.
  - `warningTypes` string[]: Filter by warning type (e.g. SCA_MISSING_LOCKFILE, SCA_RESOLUTION_FAILED, SCA_TRANSITIVES_UNRESOLVED, SCA_ZERO_RESULTS_ANOMALY). Omit to include all types.
  - `search` string: Free-text filter matched against the warning file path and message.
  - `includeResolved` boolean: Include warnings that have since been resolved. Defaults to false (active warnings only).
  - `cursor` string: Opaque pagination cursor returned as `nextCursor` from a previous response.
  - `limit` integer: Maximum number of warnings to return per page. Defaults to 50.

## Response `200`

Paginated list of coverage warnings

- ScaListWarningsResponse
  - `items` object[]
    - `id` string
    - `warningType` string
    - `file` string: Repo-relative path of the manifest the warning is about.
    - `displayMessage` string, nullable: User-facing message; may be null (render the canonical message for the type).
    - `rawMessage` string: Diagnostic message, including the recorded reason.
    - `createdAt` string, date-time
    - `resolvedAt` string, date-time, nullable
    - `repository` object
      - `id` string
      - `name` string
      - `monorepoName` string, nullable
  - `nextCursor` string, nullable

## Other responses

- `400`: Error Response
- `401`: Error Response

---

[API](https://skmtc.dev/zeropath/apis/zeropath-api.md) - [All operations](https://skmtc.dev/zeropath/apis/zeropath-api/llms.txt) - [OpenAPI document](https://skmtc.dev/zeropath/apis/zeropath-api/revisions/126e9c80ba0d?raw)