{"name":"security","stage":"ga","description":"Package security is secret scanning for your code: submit sources, get findings, masked never raw.","operations":[{"operationId":"get_security_findings","method":"GET","href":"/v1/security/findings","summary":"Is the org's findings — rule, severity, path, line, masked preview and fingerprint — newest first, across scans or within one."},{"operationId":"get_security_findings_by_id","method":"GET","href":"/v1/security/findings/{id}","summary":"Returns a single finding: which rule fired, where (path and line), the masked preview and the SHA-256 fingerprint of the secret — the raw secret is not stored and cannot be read back."},{"operationId":"get_security_health","method":"GET","href":"/v1/security/health","summary":"Reports that the scanning subsystem is serving and how many secret-detection rules the engine holds."},{"operationId":"get_security_rules","method":"GET","href":"/v1/security/rules","summary":"Is the secret-detection catalog the engine scans with."},{"operationId":"get_security_scans","method":"GET","href":"/v1/security/scans","summary":"Is the org's scan history, newest first, each as the same summary the submission answered — files read, findings fired, tally by severity."},{"operationId":"post_security_scans","method":"POST","href":"/v1/security/scans","summary":"Runs the detection engine over a batch of files and answers 201 with the scan summary: how many files were read, how many findings fired, and the tally by severity."},{"operationId":"get_security_scans_by_id","method":"GET","href":"/v1/security/scans/{id}","summary":"Returns one scan together with every finding on it, so the detail view is one round-trip rather than a list call per scan."}],"_links":{"describedby":{"href":"/v1/openapi.json?capability=security"},"self":{"href":"/v1/security"},"up":{"href":"/v1"}}}