---
title: "Update scanner settings"
method: POST
path: "/api/v2/scannerSettings/update"
tags: ["ScannerSettings"]
---

# Update scanner settings

`POST /api/v2/scannerSettings/update`

## Request

- Base URL: `https://zeropath.com`
- URL: `https://zeropath.com/api/v2/scannerSettings/update`
- Auth: API key in header `X-ZeroPath-API-Token-Id` and API key in header `X-ZeroPath-API-Token-Secret`

Update scanner settings for a scope. Only provided fields are changed; omitted fields keep their current values. Scopes: pass only organizationId to set org-wide defaults, add repositoryId for repo-specific overrides, add partitionPath for monorepo app overrides. Settings that can be configured include: prEnabled (PR scanning), fullScanCronExpression (scan frequency), scanModules (SAST/SCA/Secrets/IAC/EOL toggles), confidenceThreshold, autoPatchEnabled, highPerformanceMode, fileIgnorePatterns, and releaseTrack (EDGE). On on-premises instances, any request containing allowDeepSeekModels returns HTTP 400 because model selection is controlled by the deployment administrator.

## Request body

- union
  - object
    - `scope` 'organization', required
    - `organizationId` string
    - `patch` object, required
      - `useOnlyCustomRules` boolean, nullable
      - `defaultFullScanReleaseTrack` 'EDGE' | 'STABLE', nullable
      - `defaultPrScanReleaseTrack` 'EDGE' | 'STABLE', nullable
      - `isPrScanningEnabled` boolean, nullable
      - `allowDeepSeekModels` boolean, nullable: Whether scanner workloads may use DeepSeek models. This setting can be read but cannot be changed on on-premises instances, where model selection is managed by the deployment administrator.
      - `highPerformanceMode` boolean, nullable
      - `includeVulnDetailsInPrComment` boolean, nullable
      - `isInlinePrReviewsEnabled` boolean, nullable
      - `fullScanConfidenceFilter` 'STRICT' | 'BALANCED' | 'PERMISSIVE', nullable
      - `isLightWeightFullScan` boolean, nullable: Check known vulnerability patterns with AI validation for full repository scans. Broader AI discovery and custom natural-language rules are disabled; other enabled scanners continue to run.
      - `prScanConfidenceFilter` 'STRICT' | 'BALANCED' | 'PERMISSIVE', nullable
      - `isPrScanIssueSummaryEnabled` boolean, nullable
      - `isPrScanCleanSummaryEnabled` boolean, nullable
      - `allowSemanticPatchImprovements` boolean, nullable
      - `fullScanAutoPrGeneration` boolean, nullable
      - `prScanAutoPatching` boolean, nullable
      - `postVcsCheckStatus` boolean, nullable
      - `runVcsChecks` boolean, nullable
      - `scanDraftMRs` boolean, nullable
      - `requireCiPipeline` boolean, nullable
      - `scanBotPrs` boolean, nullable
      - `allowPrCheckBypass` boolean, nullable
      - `fullScanAutoPatching` boolean, nullable
      - `fullScanAutoRuntimeValidation` boolean, nullable
      - `fullScanAutoProvisionRuntimeValidation` boolean, nullable
      - `prBranchFormat` string, nullable
      - `prCommitMessageFormat` string, nullable
      - `prDescriptionTemplate` string, nullable
      - `prTitleTemplate` string, nullable
      - `fullScanPrGenerationThreshold` number, nullable
      - `fullScanPatchThreshold` number, nullable
      - `prCheckFailureThreshold` number, nullable
      - `prResultInclusionThreshold` number, nullable
      - `maxPrTimeoutMinutes` integer, nullable
      - `fullScanEnabledModules` string[]
      - `prScanEnabledModules` string[]
      - `scanOnFirstMeaningfulCommit` boolean, nullable
      - `scanOnEveryMeaningfulCommit` boolean, nullable
      - `scanSchedule` object, nullable
        - `executionCriteriaCrontab` string, required
        - `scanBranch` string, nullable
      - `sca` object
        - `isEnabled` boolean, nullable
        - `useNextGenScaEngine` boolean, nullable
        - `rescanCronExpression` string, nullable
        - `enableCVEAlerting` boolean, nullable
        - `autoCreateDirectPackagePRs` boolean, nullable
        - `directPackagePatchThreshold` number, nullable
        - `autoCreateTransitivePackagePRs` boolean, nullable
        - `transitivePackagePatchThreshold` number, nullable
  - object
    - `scope` 'repository', required
    - `organizationId` string
    - `repositoryId` string, required
    - `patch` object, required
      - `useOnlyCustomRules` boolean, nullable
      - `defaultFullScanReleaseTrack` 'EDGE' | 'STABLE', nullable
      - `defaultPrScanReleaseTrack` 'EDGE' | 'STABLE', nullable
      - `isPrScanningEnabled` boolean, nullable
      - `allowDeepSeekModels` boolean, nullable: Whether scanner workloads may use DeepSeek models. This setting can be read but cannot be changed on on-premises instances, where model selection is managed by the deployment administrator.
      - `highPerformanceMode` boolean, nullable
      - `includeVulnDetailsInPrComment` boolean, nullable
      - `isInlinePrReviewsEnabled` boolean, nullable
      - `fullScanConfidenceFilter` 'STRICT' | 'BALANCED' | 'PERMISSIVE', nullable
      - `isLightWeightFullScan` boolean, nullable: Check known vulnerability patterns with AI validation for full repository scans. Broader AI discovery and custom natural-language rules are disabled; other enabled scanners continue to run.
      - `prScanConfidenceFilter` 'STRICT' | 'BALANCED' | 'PERMISSIVE', nullable
      - `isPrScanIssueSummaryEnabled` boolean, nullable
      - `isPrScanCleanSummaryEnabled` boolean, nullable
      - `allowSemanticPatchImprovements` boolean, nullable
      - `fullScanAutoPrGeneration` boolean, nullable
      - `prScanAutoPatching` boolean, nullable
      - `postVcsCheckStatus` boolean, nullable
      - `runVcsChecks` boolean, nullable
      - `scanDraftMRs` boolean, nullable
      - `requireCiPipeline` boolean, nullable
      - `scanBotPrs` boolean, nullable
      - `allowPrCheckBypass` boolean, nullable
      - `fullScanAutoPatching` boolean, nullable
      - `fullScanAutoRuntimeValidation` boolean, nullable
      - `fullScanAutoProvisionRuntimeValidation` boolean, nullable
      - `prBranchFormat` string, nullable
      - `prCommitMessageFormat` string, nullable
      - `prDescriptionTemplate` string, nullable
      - `prTitleTemplate` string, nullable
      - `fullScanPrGenerationThreshold` number, nullable
      - `fullScanPatchThreshold` number, nullable
      - `prCheckFailureThreshold` number, nullable
      - `prResultInclusionThreshold` number, nullable
      - `maxPrTimeoutMinutes` integer, nullable
      - `fullScanEnabledModules` string[]
      - `prScanEnabledModules` string[]
      - `scanOnFirstMeaningfulCommit` boolean, nullable
      - `scanOnEveryMeaningfulCommit` boolean, nullable
      - `scanSchedule` object, nullable
        - `executionCriteriaCrontab` string, required
        - `scanBranch` string, nullable
      - `sca` object
        - `isEnabled` boolean, nullable
        - `useNextGenScaEngine` boolean, nullable
        - `rescanCronExpression` string, nullable
        - `enableCVEAlerting` boolean, nullable
        - `autoCreateDirectPackagePRs` boolean, nullable
        - `directPackagePatchThreshold` number, nullable
        - `autoCreateTransitivePackagePRs` boolean, nullable
        - `transitivePackagePatchThreshold` number, nullable
  - object
    - `scope` 'tag', required
    - `organizationId` string
    - `tagId` string, required
    - `patch` object, required
      - `useOnlyCustomRules` boolean, nullable
      - `defaultFullScanReleaseTrack` 'EDGE' | 'STABLE', nullable
      - `defaultPrScanReleaseTrack` 'EDGE' | 'STABLE', nullable
      - `isPrScanningEnabled` boolean, nullable
      - `allowDeepSeekModels` boolean, nullable: Whether scanner workloads may use DeepSeek models. This setting can be read but cannot be changed on on-premises instances, where model selection is managed by the deployment administrator.
      - `highPerformanceMode` boolean, nullable
      - `includeVulnDetailsInPrComment` boolean, nullable
      - `isInlinePrReviewsEnabled` boolean, nullable
      - `fullScanConfidenceFilter` 'STRICT' | 'BALANCED' | 'PERMISSIVE', nullable
      - `isLightWeightFullScan` boolean, nullable: Check known vulnerability patterns with AI validation for full repository scans. Broader AI discovery and custom natural-language rules are disabled; other enabled scanners continue to run.
      - `prScanConfidenceFilter` 'STRICT' | 'BALANCED' | 'PERMISSIVE', nullable
      - `isPrScanIssueSummaryEnabled` boolean, nullable
      - `isPrScanCleanSummaryEnabled` boolean, nullable
      - `allowSemanticPatchImprovements` boolean, nullable
      - `fullScanAutoPrGeneration` boolean, nullable
      - `prScanAutoPatching` boolean, nullable
      - `postVcsCheckStatus` boolean, nullable
      - `runVcsChecks` boolean, nullable
      - `scanDraftMRs` boolean, nullable
      - `requireCiPipeline` boolean, nullable
      - `scanBotPrs` boolean, nullable
      - `allowPrCheckBypass` boolean, nullable
      - `fullScanAutoPatching` boolean, nullable
      - `fullScanAutoRuntimeValidation` boolean, nullable
      - `fullScanAutoProvisionRuntimeValidation` boolean, nullable
      - `prBranchFormat` string, nullable
      - `prCommitMessageFormat` string, nullable
      - `prDescriptionTemplate` string, nullable
      - `prTitleTemplate` string, nullable
      - `fullScanPrGenerationThreshold` number, nullable
      - `fullScanPatchThreshold` number, nullable
      - `prCheckFailureThreshold` number, nullable
      - `prResultInclusionThreshold` number, nullable
      - `maxPrTimeoutMinutes` integer, nullable
      - `fullScanEnabledModules` string[]
      - `prScanEnabledModules` string[]
      - `scanOnFirstMeaningfulCommit` boolean, nullable
      - `scanOnEveryMeaningfulCommit` boolean, nullable
      - `scanSchedule` object, nullable
        - `executionCriteriaCrontab` string, required
        - `scanBranch` string, nullable
      - `sca` object
        - `isEnabled` boolean, nullable
        - `useNextGenScaEngine` boolean, nullable
        - `rescanCronExpression` string, nullable
        - `enableCVEAlerting` boolean, nullable
        - `autoCreateDirectPackagePRs` boolean, nullable
        - `directPackagePatchThreshold` number, nullable
        - `autoCreateTransitivePackagePRs` boolean, nullable
        - `transitivePackagePatchThreshold` number, nullable
    - `priority` number

## Response `200`

Updated scanner settings

- ScannerSettingsUpdateResponse
  - `saved` object, required
    - `useOnlyCustomRules` boolean, nullable, required
    - `defaultFullScanReleaseTrack` 'EDGE' | 'STABLE', nullable, required
    - `defaultPrScanReleaseTrack` 'EDGE' | 'STABLE', nullable, required
    - `isPrScanningEnabled` boolean, nullable, required
    - `allowDeepSeekModels` boolean, nullable, required: Whether scanner workloads may use DeepSeek models. This setting can be read but cannot be changed on on-premises instances, where model selection is managed by the deployment administrator.
    - `highPerformanceMode` boolean, nullable, required
    - `includeVulnDetailsInPrComment` boolean, nullable, required
    - `isInlinePrReviewsEnabled` boolean, nullable, required
    - `fullScanConfidenceFilter` 'STRICT' | 'BALANCED' | 'PERMISSIVE', nullable, required
    - `isLightWeightFullScan` boolean, nullable, required: Check known vulnerability patterns with AI validation for full repository scans. Broader AI discovery and custom natural-language rules are disabled; other enabled scanners continue to run.
    - `prScanConfidenceFilter` 'STRICT' | 'BALANCED' | 'PERMISSIVE', nullable, required
    - `isPrScanIssueSummaryEnabled` boolean, nullable, required
    - `isPrScanCleanSummaryEnabled` boolean, nullable, required
    - `allowSemanticPatchImprovements` boolean, nullable, required
    - `fullScanAutoPrGeneration` boolean, nullable, required
    - `prScanAutoPatching` boolean, nullable, required
    - `postVcsCheckStatus` boolean, nullable, required
    - `runVcsChecks` boolean, nullable, required
    - `scanDraftMRs` boolean, nullable, required
    - `requireCiPipeline` boolean, nullable, required
    - `scanBotPrs` boolean, nullable, required
    - `allowPrCheckBypass` boolean, nullable, required
    - `fullScanAutoPatching` boolean, nullable, required
    - `fullScanAutoRuntimeValidation` boolean, nullable, required
    - `fullScanAutoProvisionRuntimeValidation` boolean, nullable, required
    - `prBranchFormat` string, nullable, required
    - `prCommitMessageFormat` string, nullable, required
    - `prDescriptionTemplate` string, nullable, required
    - `prTitleTemplate` string, nullable, required
    - `fullScanPrGenerationThreshold` number, nullable, required
    - `fullScanPatchThreshold` number, nullable, required
    - `prCheckFailureThreshold` number, nullable, required
    - `prResultInclusionThreshold` number, nullable, required
    - `maxPrTimeoutMinutes` number, nullable, required
    - `fullScanEnabledModules` string[], nullable, required
    - `prScanEnabledModules` string[], nullable, required
    - `scanOnFirstMeaningfulCommit` boolean, nullable, required
    - `scanOnEveryMeaningfulCommit` boolean, nullable, required
    - `sca` object, nullable, required
      - `isEnabled` boolean, nullable, required
      - `useNextGenScaEngine` boolean, nullable, required
      - `rescanCronExpression` string, nullable, required
      - `enableCVEAlerting` boolean, nullable, required
      - `autoCreateDirectPackagePRs` boolean, nullable, required
      - `directPackagePatchThreshold` number, nullable, required
      - `autoCreateTransitivePackagePRs` boolean, nullable, required
      - `transitivePackagePatchThreshold` number, nullable, required
    - `scanSchedule` object, nullable, required
      - `executionCriteriaCrontab` string, required
      - `scanBranch` string, nullable, required
    - `scanSchedules` object[], required
      - `executionCriteriaCrontab` string, required
      - `scanBranch` string, nullable, required
  - `effective` object, required
    - `useOnlyCustomRules` boolean, nullable, required
    - `defaultFullScanReleaseTrack` 'EDGE' | 'STABLE', nullable, required
    - `defaultPrScanReleaseTrack` 'EDGE' | 'STABLE', nullable, required
    - `isPrScanningEnabled` boolean, nullable, required
    - `allowDeepSeekModels` boolean, nullable, required: Whether scanner workloads may use DeepSeek models. This setting can be read but cannot be changed on on-premises instances, where model selection is managed by the deployment administrator.
    - `highPerformanceMode` boolean, nullable, required
    - `includeVulnDetailsInPrComment` boolean, nullable, required
    - `isInlinePrReviewsEnabled` boolean, nullable, required
    - `fullScanConfidenceFilter` 'STRICT' | 'BALANCED' | 'PERMISSIVE', nullable, required
    - `isLightWeightFullScan` boolean, nullable, required: Check known vulnerability patterns with AI validation for full repository scans. Broader AI discovery and custom natural-language rules are disabled; other enabled scanners continue to run.
    - `prScanConfidenceFilter` 'STRICT' | 'BALANCED' | 'PERMISSIVE', nullable, required
    - `isPrScanIssueSummaryEnabled` boolean, nullable, required
    - `isPrScanCleanSummaryEnabled` boolean, nullable, required
    - `allowSemanticPatchImprovements` boolean, nullable, required
    - `fullScanAutoPrGeneration` boolean, nullable, required
    - `prScanAutoPatching` boolean, nullable, required
    - `postVcsCheckStatus` boolean, nullable, required
    - `runVcsChecks` boolean, nullable, required
    - `scanDraftMRs` boolean, nullable, required
    - `requireCiPipeline` boolean, nullable, required
    - `scanBotPrs` boolean, nullable, required
    - `allowPrCheckBypass` boolean, nullable, required
    - `fullScanAutoPatching` boolean, nullable, required
    - `fullScanAutoRuntimeValidation` boolean, nullable, required
    - `fullScanAutoProvisionRuntimeValidation` boolean, nullable, required
    - `prBranchFormat` string, nullable, required
    - `prCommitMessageFormat` string, nullable, required
    - `prDescriptionTemplate` string, nullable, required
    - `prTitleTemplate` string, nullable, required
    - `fullScanPrGenerationThreshold` number, nullable, required
    - `fullScanPatchThreshold` number, nullable, required
    - `prCheckFailureThreshold` number, nullable, required
    - `prResultInclusionThreshold` number, nullable, required
    - `maxPrTimeoutMinutes` number, nullable, required
    - `fullScanEnabledModules` string[], nullable, required
    - `prScanEnabledModules` string[], nullable, required
    - `scanOnFirstMeaningfulCommit` boolean, nullable, required
    - `scanOnEveryMeaningfulCommit` boolean, nullable, required
    - `sca` object, nullable, required
      - `isEnabled` boolean, nullable, required
      - `useNextGenScaEngine` boolean, nullable, required
      - `rescanCronExpression` string, nullable, required
      - `enableCVEAlerting` boolean, nullable, required
      - `autoCreateDirectPackagePRs` boolean, nullable, required
      - `directPackagePatchThreshold` number, nullable, required
      - `autoCreateTransitivePackagePRs` boolean, nullable, required
      - `transitivePackagePatchThreshold` number, nullable, required
    - `scanSchedule` object, nullable, required
      - `executionCriteriaCrontab` string, required
      - `scanBranch` string, nullable, required
    - `scanSchedules` object[], required
      - `executionCriteriaCrontab` string, required
      - `scanBranch` string, nullable, required
  - `ok` boolean, required

## Other responses

- `400`: Error Response
- `401`: Error Response
- `404`: Error Response

---

[API](https://skmtc.dev/zeropath/apis/zeropath-api.md) - [All operations](https://skmtc.dev/zeropath/apis/zeropath-api/llms.txt) - [OpenAPI document](https://skmtc.dev/zeropath/apis/zeropath-api/revisions/126e9c80ba0d?raw)