> ## Documentation Index > Fetch the complete documentation index at: https://evalgate.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # Get repository intelligence scanRunId > Requires scopes: eval:read ## OpenAPI ````yaml /api-reference/openapi.json get /api/repository-intelligence/repositories/{repositoryId}/scans/{scanRunId} openapi: 3.1.2 info: title: EvalGate API version: 18.13.0 description: EvalGate API. See docs/api-contract.md for stability commitments. servers: - url: https://evalgate.com description: Production - url: http://localhost:3000 description: Local security: [] paths: /api/repository-intelligence/repositories/{repositoryId}/scans/{scanRunId}: get: tags: - repository intelligence summary: Get repository intelligence scanRunId description: 'Requires scopes: eval:read' operationId: get_repository_intelligence_repositories_repositoryId_scans_scanRunId parameters: - name: repositoryId in: path required: true schema: type: string - name: scanRunId in: path required: true schema: type: string - name: includeEvidence in: query required: false schema: type: string responses: '200': description: Successful response content: application/json: schema: $ref: >- #/components/schemas/GetApiRepositoryIntelligenceRepositoriesRepositoryIdScansScanRunIdResponse200ApplicationJson '400': $ref: '#/components/responses/ValidationError' '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' '404': $ref: '#/components/responses/NotFound' '409': $ref: '#/components/responses/Conflict' '429': $ref: '#/components/responses/RateLimited' '500': $ref: '#/components/responses/InternalError' '503': $ref: '#/components/responses/ServiceUnavailable' security: - bearerAuth: [] components: schemas: GetApiRepositoryIntelligenceRepositoriesRepositoryIdScansScanRunIdResponse200ApplicationJson: type: object properties: scanRun: type: object properties: id: type: string organizationId: $ref: '#/components/schemas/OrganizationId' repositoryId: type: number snapshotId: type: string status: type: string completeness: oneOf: - type: string enum: - complete - type: string enum: - failed - type: string enum: - partial idempotencyKey: type: string evidenceStorage: oneOf: - type: string enum: - binary-v1 - type: string enum: - relational-v1 detectorRegistryHash: type: string manifestHash: type: string intakeIdentityHash: oneOf: - type: 'null' - type: string intakeManifestHash: oneOf: - type: 'null' - type: string selectedRootPath: oneOf: - type: 'null' - type: string selectedHarnessKey: oneOf: - type: 'null' - type: string graphVersionId: oneOf: - type: 'null' - type: string fileCount: type: number factCount: type: number relationCount: type: number warnings: type: array items: type: string phaseMetrics: oneOf: - type: 'null' - type: object properties: reuseContextHash: type: string artifactSealMs: type: number materializeMs: type: number publishMs: type: number databaseRoundTrips: type: number batchSize: type: number reusedNodeRevisions: type: number reusedEdgeRevisions: type: number additionalProperties: false required: - artifactSealMs - materializeMs - publishMs - databaseRoundTrips - batchSize - reusedNodeRevisions - reusedEdgeRevisions detectorSummary: oneOf: - type: 'null' - type: object properties: state: oneOf: - type: string enum: - complete - type: string enum: - in_progress processedThroughId: type: string totalRuns: type: number storedRuns: type: number detectors: type: object additionalProperties: type: object properties: version: type: string versions: type: array items: type: string complete: type: number partial: type: number skipped: type: number failed: type: number facts: type: number relations: type: number additionalProperties: false required: - version - complete - partial - skipped - failed - facts - relations additionalProperties: false required: - totalRuns - storedRuns - detectors startedAt: type: string format: date-time completedAt: oneOf: - type: 'null' - type: string format: date-time additionalProperties: false required: - id - organizationId - repositoryId - snapshotId - status - completeness - idempotencyKey - evidenceStorage - detectorRegistryHash - manifestHash - intakeIdentityHash - intakeManifestHash - selectedRootPath - selectedHarnessKey - graphVersionId - fileCount - factCount - relationCount - warnings - phaseMetrics - detectorSummary - startedAt - completedAt detectorRuns: type: array items: type: object properties: id: type: string organizationId: $ref: '#/components/schemas/OrganizationId' scanRunId: type: string detectorId: type: string detectorVersion: type: string path: type: string status: type: string evidenceHash: type: string warnings: type: array items: type: string factCount: type: number relationCount: type: number createdAt: type: string format: date-time additionalProperties: false required: - id - organizationId - scanRunId - detectorId - detectorVersion - path - status - evidenceHash - warnings - factCount - relationCount - createdAt findings: oneOf: - type: array items: $ref: '#/components/schemas/JsonValue' - type: array items: type: object properties: id: type: string organizationId: $ref: '#/components/schemas/OrganizationId' repositoryId: type: number graphVersionId: type: string category: type: string severity: oneOf: - type: string enum: - critical - type: string enum: - high - type: string enum: - info - type: string enum: - warning title: type: string summary: type: string affectedNodeIds: type: array items: type: string affectedObjectiveIds: type: array items: type: string evidenceIds: type: array items: type: string recommendedActionType: type: string state: oneOf: - type: string enum: - accepted_risk - type: string enum: - dismissed - type: string enum: - open - type: string enum: - resolved contentHash: type: string analyzerVersion: oneOf: - type: 'null' - type: string analysisFingerprint: oneOf: - type: 'null' - type: string createdAt: type: string format: date-time additionalProperties: false required: - id - organizationId - repositoryId - graphVersionId - category - severity - title - summary - affectedNodeIds - affectedObjectiveIds - evidenceIds - recommendedActionType - state - contentHash - analyzerVersion - analysisFingerprint - createdAt recommendedBaseline: type: object properties: materializedCaseHash: type: string schemaVersion: type: string enum: - evalgate.repository-baseline.v1 status: oneOf: - type: string enum: - ready - type: string enum: - review_required - type: string enum: - stale planHash: type: string sourcePlanHash: type: string candidatePoolLabel: type: string identity: type: object properties: repositoryId: type: number fullName: type: string requestedRef: type: string commitSha: type: string rootPath: type: string harnessPresetKey: oneOf: - type: 'null' - type: string scanRunId: type: string graphVersionId: type: string snapshotHash: type: string intakeManifestHash: oneOf: - type: 'null' - type: string additionalProperties: false required: - repositoryId - fullName - requestedRef - commitSha - rootPath - harnessPresetKey - scanRunId - graphVersionId - snapshotHash - intakeManifestHash summary: type: object properties: selectedTestCount: type: number selectedCaseCount: type: number confirmedTestCount: type: number needsConfirmationCount: type: number deterministicCaseCount: type: number modelBackedCaseCount: type: number targetProbeCaseCount: type: number estimatedTargetCalls: type: number estimatedJudgeCalls: type: number staticScanOnly: type: boolean enum: - true additionalProperties: false required: - selectedTestCount - selectedCaseCount - confirmedTestCount - needsConfirmationCount - deterministicCaseCount - modelBackedCaseCount - targetProbeCaseCount - estimatedTargetCalls - estimatedJudgeCalls - staticScanOnly executionPreview: type: object properties: rootPath: type: string harnessPresetKey: oneOf: - type: 'null' - type: string packageManager: oneOf: - type: 'null' - type: string installCommand: oneOf: - type: 'null' - type: string provider: oneOf: - type: 'null' - type: string runner: oneOf: - type: 'null' - type: string baselineCommands: type: array items: type: string requiredServices: type: array items: type: string capabilities: type: array items: type: string privilegeClass: oneOf: - type: 'null' - type: string isolation: oneOf: - type: 'null' - type: string networkPolicy: oneOf: - type: 'null' - type: string writablePaths: type: array items: type: string forbiddenPaths: type: array items: type: string timeoutMs: oneOf: - type: 'null' - type: number sideEffects: type: string enum: - unknown expectedCost: type: string enum: - unknown expectedRuntime: type: string enum: - unknown existingCaseCount: type: number generatedCaseCount: type: number sourceClassification: oneOf: - type: string enum: - existing_and_generated - type: string enum: - existing_only - type: string enum: - generated_only - type: string enum: - none evaluatorRefs: type: array items: type: string verifierVersionId: oneOf: - type: 'null' - type: string additionalProperties: false required: - rootPath - harnessPresetKey - packageManager - installCommand - provider - runner - baselineCommands - requiredServices - capabilities - privilegeClass - isolation - networkPolicy - writablePaths - forbiddenPaths - timeoutMs - sideEffects - expectedCost - expectedRuntime - existingCaseCount - generatedCaseCount - sourceClassification - evaluatorRefs - verifierVersionId opportunities: type: array items: type: object properties: key: type: string title: type: string description: type: string mechanism: type: string falsifier: type: string artifactRequirements: type: array items: type: string verification: type: string evidence: type: array items: type: object properties: label: type: string confidence: type: number path: type: string startLine: type: number endLine: type: number role: oneOf: - type: string enum: - declaration_catalog - type: string enum: - execution_observation - type: string enum: - implementation - type: string enum: - test_fixture - type: string enum: - tooling_configuration supportsClaim: type: string doesNotEstablish: type: string additionalProperties: false required: - label - confidence - role - supportsClaim - doesNotEstablish additionalProperties: false required: - key - title - description - mechanism - falsifier - artifactRequirements - verification - evidence safety: type: object properties: planningExecution: type: string enum: - none planningWrites: type: string enum: - none spendBeforeRun: type: string enum: - none requiresHumanReview: type: boolean enum: - true additionalProperties: false required: - planningExecution - planningWrites - spendBeforeRun - requiresHumanReview blockers: type: array items: type: string warnings: type: array items: type: string tests: type: array items: type: object properties: key: type: string title: type: string summary: type: string category: type: string priority: oneOf: - type: string enum: - recommended - type: string enum: - required executionMode: oneOf: - type: string enum: - deterministic - type: string enum: - model_backed - type: string enum: - target_probe caseCount: type: number reason: type: string evidence: type: array items: type: object properties: label: type: string confidence: type: number path: type: string startLine: type: number endLine: type: number role: oneOf: - type: string enum: - declaration_catalog - type: string enum: - execution_observation - type: string enum: - implementation - type: string enum: - test_fixture - type: string enum: - tooling_configuration supportsClaim: type: string doesNotEstablish: type: string additionalProperties: false required: - label - confidence - role - supportsClaim - doesNotEstablish applicability: oneOf: - type: string enum: - blocked_missing_config - type: string enum: - evidence_supported - type: string enum: - needs_confirmation - type: string enum: - not_relevant - type: string enum: - policy_required selectionState: oneOf: - type: string enum: - selected - type: string enum: - suggested userFacingQuestion: type: string specificBenefit: type: string needs: type: array items: type: string proposedScenario: type: string uncertainty: oneOf: - type: 'null' - type: string userProvidedContext: type: object properties: statement: type: string disposition: oneOf: - type: string enum: - confirm_for_feature - type: string enum: - not_relevant expectedFormatNote: type: string featureScopeNote: type: string requirementNote: type: string additionalProperties: false required: - statement - disposition additionalProperties: false required: - key - title - summary - category - priority - executionMode - caseCount - reason - evidence - applicability - selectionState - userFacingQuestion - specificBenefit - needs - proposedScenario - uncertainty additionalProperties: false required: - schemaVersion - status - planHash - candidatePoolLabel - identity - summary - executionPreview - opportunities - safety - blockers - warnings - tests analysis: oneOf: - type: 'null' - type: object properties: graphVersionId: type: string manifestHash: type: string manifest: type: object properties: schemaVersion: type: number enum: - 1 source: type: object properties: repositoryId: type: number headSha: type: string rootTreeSha: type: string snapshotHash: type: string selectedRootPath: type: string intakeManifestHash: oneOf: - type: 'null' - type: string additionalProperties: false required: - repositoryId - headSha - rootTreeSha - snapshotHash - selectedRootPath - intakeManifestHash detectionManifestHash: type: string toolchain: type: object properties: scannerReleaseId: type: string detectorRegistry: type: object properties: version: type: string hash: type: string additionalProperties: false required: - version - hash detectors: type: array items: type: object properties: id: type: string version: type: string additionalProperties: false required: - id - version parsers: type: array items: type: object properties: language: type: string id: type: string version: type: string options: type: string limitations: type: array items: type: string additionalProperties: false required: - language - id - version - limitations resolvers: type: array items: type: object properties: language: type: string id: type: string version: type: string options: type: string limitations: type: array items: type: string additionalProperties: false required: - language - id - version - limitations privacy: type: object properties: policyId: type: string policyVersion: type: string policyHash: type: string secretScanner: type: object properties: id: type: string patternSetHash: type: string additionalProperties: false required: - id - patternSetHash additionalProperties: false required: - policyId - policyVersion - policyHash - secretScanner additionalProperties: false required: - scannerReleaseId - detectorRegistry - detectors - parsers - resolvers - privacy capabilities: type: object additionalProperties: type: object properties: state: oneOf: - type: string enum: - failed - type: string enum: - not_applicable - type: string enum: - partial - type: string enum: - supported - type: string enum: - unavailable - type: string enum: - unsupported reasonCodes: type: array items: type: string counts: type: object properties: inputs: type: number analyzed: type: number partial: type: number failed: type: number additionalProperties: false required: - inputs - analyzed - partial - failed additionalProperties: false required: - state - reasonCodes manifestHash: type: string additionalProperties: false required: - schemaVersion - source - detectionManifestHash - toolchain - capabilities - manifestHash additionalProperties: false required: - graphVersionId - manifestHash - manifest aiStack: type: array items: type: object properties: id: type: string label: type: string category: type: string additionalProperties: false required: - id - label - category binaryEvidence: oneOf: - type: 'null' - type: object properties: codec: type: string enum: - v8-brotli-v1 sha256: type: string valueHash: type: string uncompressedBytes: type: number storedBytes: type: number observationsCaptured: type: boolean dataBase64: type: string additionalProperties: false required: - codec - sha256 - valueHash - uncompressedBytes - storedBytes - observationsCaptured - dataBase64 additionalProperties: false required: - scanRun - detectorRuns - findings - recommendedBaseline - analysis - aiStack OrganizationId: type: string format: uuid JsonValue: oneOf: - type: 'null' - type: boolean - type: number - type: string - type: array items: $ref: '#/components/schemas/JsonValue' - type: object additionalProperties: $ref: '#/components/schemas/JsonValue' ApiError: type: object properties: error: type: object properties: code: type: string enum: - UNAUTHORIZED - FORBIDDEN - NOT_FOUND - INVALID_REFERENCE - VALIDATION_ERROR - RATE_LIMITED - CONFLICT - INTERNAL_ERROR - SERVICE_UNAVAILABLE - QUOTA_EXCEEDED - FEATURE_LIMIT_REACHED - NO_ORG_MEMBERSHIP - SHARE_REVOKED - SHARE_EXPIRED - SHARE_UNAVAILABLE - PROVIDER_KEY_MISSING - PROVIDER_KEY_EXPIRED - PROVIDER_RATE_LIMITED - PROVIDER_UNAUTHORIZED - PROVIDER_UNAVAILABLE - AGENT_HANDOFF_INVALID - AGENT_HANDOFF_EXPIRED - AGENT_HANDOFF_DENIED - AGENT_HANDOFF_CONSUMED - PAYLOAD_TOO_LARGE - METHOD_NOT_ALLOWED message: type: string details: {} requestId: type: string format: uuid redaction: type: object properties: applied: type: boolean enum: - true fieldCount: type: integer minimum: 0 secretCount: type: integer minimum: 0 required: - applied - fieldCount - secretCount required: - code - message required: - error responses: ValidationError: description: Validation error content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string Unauthorized: description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string WWW-Authenticate: description: >- Bearer challenge. Agent-facing routes include the RFC 9728 resource_metadata URL. schema: type: string Forbidden: description: Forbidden content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string NotFound: description: Resource not found content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string Conflict: description: Conflict content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string RateLimited: description: Rate limit exceeded content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string Retry-After: description: Delay in seconds before retrying when present. schema: type: integer minimum: 1 InternalError: description: Internal server error content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string ServiceUnavailable: description: Service unavailable content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string securitySchemes: bearerAuth: type: http scheme: bearer bearerFormat: EvalGate API key description: >- Organization-scoped EvalGate API key. Discover the supported agent scopes at /.well-known/oauth-protected-resource. Per-operation grants are listed in x-evalgate-required-scopes; OpenAPI bearer security requirement arrays remain empty as required for non-OAuth schemes. x-evalgate-scopes-supported: - eval:read - eval:write - objectives:read - objectives:write - runs:read - runs:write - traces:read - traces:write - exports:download - reports:write - prompt:publish - scorer:publish - red_team:read - red_team:run - red_team:approve - docs:read - agent:read - agent:execute - resources:read - resources:write - contexts:read - contexts:write - observations:write - checks:read - checks:run - standards:read - standards:write - standards:approve - grants:read - grants:write - admin:keys - admin:workspace - admin:org x-evalgate-protected-resource-metadata: https://www.evalgate.com/.well-known/oauth-protected-resource ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.