Hacktron REST API - Repos API

openapi: 3.2.0
info:
  title: Hacktron REST API - Repos API
  version: '1.0'
  contact: {}
  description: 'Operations tagged REST API - Repos across 2 of this provider''s published API definitions: hacktron-openapi.json, openapi.json. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api.hacktron.ai/v1
security:
- api-key: []
tags:
- name: REST API - Repos
paths:
  /repos:
    get:
      operationId: RestRepoController_list
      parameters: []
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/MergedReposResponseDto'
      summary: List repositories from all connected providers, including whether PR scans are…
      tags:
      - REST API - Repos
    servers:
    - url: https://api.hacktron.ai/v1
components:
  schemas:
    MergedReposResponseDto:
      type: object
      properties:
        repos:
          description: Unified list of repositories from all providers
          type: array
          items:
            $ref: '#/components/schemas/UnifiedRepoDto'
        errors:
          description: Providers that failed to respond
          example: []
          type: array
          items:
            type: string
      required:
      - repos
      - errors
    UnifiedRepoDto:
      type: object
      properties:
        id:
          type: string
          description: Internal UUID
          example: 123e4567-e89b-12d3-a456-426614174000
        provider:
          type: string
          description: Source provider
          enum:
          - github
          - gitlab
          - bitbucket
          - azure
          example: github
        name:
          type: string
          description: Display name (owner/repo for GitHub, namespace/project for GitLab, workspace/slug for Bitbucket, project/repository for Azure DevOps)
          example: octocat/Hello-World
        providerKey:
          type: string
          description: 'Provider-native identifier for mutation endpoints. GitHub: owner/repo, GitLab: numeric projectId (as string), Bitbucket: repository UUID, Azure DevOps: repository UUID.'
          example: octocat/Hello-World
        enabled:
          type: boolean
          description: Whether the repository is enabled for scanning
          example: true
        threatModelUpdatedAt:
          type:
          - string
          - 'null'
          description: ISO timestamp of the repo's most recent threat_model.md update, or null if it has none. Repos are returned ordered by this (most recent first; repos without a threat model last).
          example: '2026-06-22T12:00:00.000Z'
        openFindingsCount:
          type: number
          description: Number of approved, visible findings that remain open for this repository
          example: 3
        lastScanAt:
          type:
          - string
          - 'null'
          description: ISO timestamp of the most recent completed scan containing this repository, or null if it has not been scanned
          example: '2026-09-15T12:00:00.000Z'
        ossApproved:
          type: boolean
          description: Whether this github.com repository is approved for free OSS PR reviews. Independent of whether PR scans are enabled.
          example: true
        prScansEnabled:
          type: boolean
          description: Whether PR/MR scans are enabled (GitHub and GitLab)
          example: true
        prScanBranches:
          description: Target branch patterns for PR/MR scans (GitHub and GitLab)
          example:
          - main
          - '**/release/**'
          type: array
          items:
            type: string
        installationId:
          type: number
          description: GitHub App installation ID (GitHub only)
          example: 12345678
        baseUrl:
          type:
          - string
          - 'null'
          description: GitHub Enterprise base URL for self-hosted (PAT) installations (null/absent for github.com), the GitLab installation URL, or the Azure DevOps organization URL. Clients should build clone/display URLs from this host instead of assuming the public provider host.
          example: https://ghe.example.com
        defaultBranch:
          type: string
          description: Default branch (GitLab only)
          example: main
        visibility:
          type: string
          description: Project visibility (GitLab only)
          example: private
        webhookRegistered:
          type: boolean
          description: Whether a webhook is registered for this project (GitLab only)
          example: true
        isPrivate:
          type: boolean
          description: Whether the repository is private (Bitbucket only)
          example: true
      required:
      - id
      - provider
      - name
      - providerKey
      - enabled
      - threatModelUpdatedAt
      - openFindingsCount
      - lastScanAt
  securitySchemes:
    api-key:
      type: apiKey
      in: header
      name: X-Api-Key
x-refined-from:
- hacktron-openapi.json
- openapi.json