Snyk ServiceAccounts API

The ServiceAccounts API from Snyk — 6 operation(s) for serviceaccounts.

OpenAPI Specification

snyk-serviceaccounts-api-openapi.yml Raw ↑
openapi: 3.0.3
info:
  title: Snyk AccessRequests ServiceAccounts API
  version: REST
servers:
- description: Snyk REST API
  url: https://api.snyk.io/rest
security:
- APIToken: []
- BearerAuth: []
tags:
- name: ServiceAccounts
paths:
  /groups/{group_id}/service_accounts:
    get:
      description: 'Get all service accounts for a group.


        #### Required permissions


        - `View service accounts (group.service_account.read)`'
      operationId: getManyGroupServiceAccount
      parameters:
      - description: The ID of the Snyk Group that owns the service accounts.
        in: path
        name: group_id
        required: true
        schema:
          format: uuid
          type: string
      - $ref: '#/components/parameters/StartingAfter'
      - $ref: '#/components/parameters/EndingBefore'
      - $ref: '#/components/parameters/Limit'
      - $ref: '#/components/parameters/Version'
      responses:
        '200':
          content:
            application/vnd.api+json:
              schema:
                additionalProperties: false
                properties:
                  data:
                    items:
                      $ref: '#/components/schemas/ServiceAccount'
                    type: array
                  jsonapi:
                    $ref: '#/components/schemas/JsonApi'
                  links:
                    $ref: '#/components/schemas/Links'
                  meta:
                    properties:
                      access_tokens:
                        properties:
                          max_active_tokens:
                            type: integer
                          max_expiry_days:
                            type: integer
                        required:
                        - max_active_tokens
                        - max_expiry_days
                        type: object
                    type: object
                required:
                - jsonapi
                - data
                - links
                type: object
          description: A list of service accounts is returned.
          headers:
            deprecation:
              $ref: '#/components/headers/DeprecationHeader'
            location:
              $ref: '#/components/headers/LocationHeader'
            snyk-request-id:
              $ref: '#/components/headers/RequestIdResponseHeader'
            snyk-version-lifecycle-stage:
              $ref: '#/components/headers/VersionStageResponseHeader'
            snyk-version-requested:
              $ref: '#/components/headers/VersionRequestedResponseHeader'
            snyk-version-served:
              $ref: '#/components/headers/VersionServedResponseHeader'
            sunset:
              $ref: '#/components/headers/SunsetHeader'
        '400':
          $ref: '#/components/responses/400'
        '401':
          $ref: '#/components/responses/401'
        '403':
          $ref: '#/components/responses/403'
        '404':
          $ref: '#/components/responses/404'
        '500':
          $ref: '#/components/responses/500'
      summary: Get a list of group service accounts.
      tags:
      - ServiceAccounts
      x-snyk-api-lifecycle: released
      x-snyk-api-releases:
      - '2023-09-07'
      x-snyk-api-resource: service_accounts
      x-snyk-api-stability: ga
      x-snyk-api-version: '2023-09-07'
      x-stability-level: stable
    post:
      description: 'Create a service account for a group. The service account can be used to access the Snyk API.


        #### Required permissions


        - `Create service accounts (group.service_account.create)`'
      operationId: createGroupServiceAccount
      parameters:
      - description: The ID of the Snyk Group that is creating and owns the service account
        in: path
        name: group_id
        required: true
        schema:
          format: uuid
          type: string
      - $ref: '#/components/parameters/Version'
      requestBody:
        content:
          application/vnd.api+json:
            schema:
              additionalProperties: false
              properties:
                data:
                  additionalProperties: false
                  properties:
                    attributes:
                      additionalProperties: false
                      properties:
                        access_token_expires_at:
                          description: The expiry date of the access token. Required only when auth_type is access_token.
                          example: '2025-08-16T00:00:00Z'
                          format: date-time
                          type: string
                        access_token_ttl_seconds:
                          description: The time, in seconds, that a generated oauth access token will be valid for. Defaults to 1 hour if unset. Only used when auth_type is one of the oauth_* variants.
                          maximum: 86400
                          minimum: 3600
                          type: number
                        auth_type:
                          description: "The authentication strategy for the service account:\n  * api_key - Regular Snyk API Key.\n  * oauth_client_secret - OAuth2 client_credentials grant, which returns a client secret that can be used to retrieve an oauth access token.\n  * oauth_private_key_jwt - OAuth2 client_credentials grant, using private_key_jwt client_assertion as laid out in OIDC Connect Core 1.0, section 9.\n  * access_token - Access tokens are long-lived, can be used more than once for increased flexibility, and have expiries for enhanced security."
                          enum:
                          - api_key
                          - oauth_client_secret
                          - oauth_private_key_jwt
                          - access_token
                          type: string
                        jwks_url:
                          description: A JWKs URL hosting your public keys, used to verify signed JWT requests. Must be https. Required only when auth_type is oauth_private_key_jwt.
                          type: string
                        name:
                          description: A human-friendly name for the service account.
                          type: string
                        role_id:
                          description: The ID of the role which the created service account should use. Obtained in the Snyk UI, via "Group Page" -> "Settings" -> "Member Roles" -> "Create new Role". Can be shared among multiple accounts.
                          format: uuid
                          type: string
                      required:
                      - name
                      - role_id
                      - auth_type
                      type: object
                    type:
                      description: The Resource type.
                      enum:
                      - service_account
                      type: string
                  required:
                  - type
                  - attributes
                  type: object
              required:
              - data
              type: object
        required: true
      responses:
        '201':
          content:
            application/vnd.api+json:
              schema:
                additionalProperties: false
                properties:
                  data:
                    $ref: '#/components/schemas/ServiceAccount'
                  jsonapi:
                    $ref: '#/components/schemas/JsonApi'
                  links:
                    $ref: '#/components/schemas/Links'
                required:
                - jsonapi
                - data
                type: object
          description: A new service account has been created
          headers:
            deprecation:
              $ref: '#/components/headers/DeprecationHeader'
            location:
              $ref: '#/components/headers/LocationHeader'
            snyk-request-id:
              $ref: '#/components/headers/RequestIdResponseHeader'
            snyk-version-lifecycle-stage:
              $ref: '#/components/headers/VersionStageResponseHeader'
            snyk-version-requested:
              $ref: '#/components/headers/VersionRequestedResponseHeader'
            snyk-version-served:
              $ref: '#/components/headers/VersionServedResponseHeader'
            sunset:
              $ref: '#/components/headers/SunsetHeader'
        '400':
          $ref: '#/components/responses/400'
        '401':
          $ref: '#/components/responses/401'
        '404':
          $ref: '#/components/responses/404'
        '500':
          $ref: '#/components/responses/500'
      summary: Create a service account for a group.
      tags:
      - ServiceAccounts
      x-snyk-api-lifecycle: released
      x-snyk-api-releases:
      - '2023-09-07'
      x-snyk-api-resource: service_accounts
      x-snyk-api-stability: ga
      x-snyk-api-version: '2023-09-07'
      x-stability-level: stable
  /groups/{group_id}/service_accounts/{serviceaccount_id}:
    delete:
      description: 'Permanently delete a group-level service account by its ID.


        #### Required permissions


        - `Delete service accounts (group.service_account.delete)`'
      operationId: deleteOneGroupServiceAccount
      parameters:
      - description: The ID of the Snyk Group that owns the service account.
        in: path
        name: group_id
        required: true
        schema:
          format: uuid
          type: string
      - description: The ID of the service account.
        in: path
        name: serviceaccount_id
        required: true
        schema:
          format: uuid
          type: string
      - $ref: '#/components/parameters/Version'
      responses:
        '204':
          description: Service account was successfully deleted.
          headers:
            deprecation:
              $ref: '#/components/headers/DeprecationHeader'
            location:
              $ref: '#/components/headers/LocationHeader'
            snyk-request-id:
              $ref: '#/components/headers/RequestIdResponseHeader'
            snyk-version-lifecycle-stage:
              $ref: '#/components/headers/VersionStageResponseHeader'
            snyk-version-requested:
              $ref: '#/components/headers/VersionRequestedResponseHeader'
            snyk-version-served:
              $ref: '#/components/headers/VersionServedResponseHeader'
            sunset:
              $ref: '#/components/headers/SunsetHeader'
        '400':
          $ref: '#/components/responses/400'
        '401':
          $ref: '#/components/responses/401'
        '403':
          $ref: '#/components/responses/403'
        '404':
          $ref: '#/components/responses/404'
        '500':
          $ref: '#/components/responses/500'
      summary: Delete a group service account.
      tags:
      - ServiceAccounts
      x-snyk-api-lifecycle: released
      x-snyk-api-releases:
      - '2023-09-07'
      x-snyk-api-resource: service_accounts
      x-snyk-api-stability: ga
      x-snyk-api-version: '2023-09-07'
      x-stability-level: stable
    get:
      description: 'Get a group-level service account by its ID.


        #### Required permissions


        - `View service accounts (group.service_account.read)`'
      operationId: getOneGroupServiceAccount
      parameters:
      - description: The ID of the Snyk Group that owns the service account.
        in: path
        name: group_id
        required: true
        schema:
          format: uuid
          type: string
      - description: The ID of the service account.
        in: path
        name: serviceaccount_id
        required: true
        schema:
          format: uuid
          type: string
      - $ref: '#/components/parameters/Version'
      responses:
        '200':
          content:
            application/vnd.api+json:
              schema:
                additionalProperties: false
                properties:
                  data:
                    $ref: '#/components/schemas/ServiceAccount'
                  jsonapi:
                    $ref: '#/components/schemas/JsonApi'
                  links:
                    $ref: '#/components/schemas/Links'
                required:
                - jsonapi
                - data
                - links
                type: object
          description: Service account is returned.
          headers:
            deprecation:
              $ref: '#/components/headers/DeprecationHeader'
            location:
              $ref: '#/components/headers/LocationHeader'
            snyk-request-id:
              $ref: '#/components/headers/RequestIdResponseHeader'
            snyk-version-lifecycle-stage:
              $ref: '#/components/headers/VersionStageResponseHeader'
            snyk-version-requested:
              $ref: '#/components/headers/VersionRequestedResponseHeader'
            snyk-version-served:
              $ref: '#/components/headers/VersionServedResponseHeader'
            sunset:
              $ref: '#/components/headers/SunsetHeader'
        '400':
          $ref: '#/components/responses/400'
        '401':
          $ref: '#/components/responses/401'
        '403':
          $ref: '#/components/responses/403'
        '404':
          $ref: '#/components/responses/404'
        '500':
          $ref: '#/components/responses/500'
      summary: Get a group service account.
      tags:
      - ServiceAccounts
      x-snyk-api-lifecycle: released
      x-snyk-api-releases:
      - '2023-09-07'
      x-snyk-api-resource: service_accounts
      x-snyk-api-stability: ga
      x-snyk-api-version: '2023-09-07'
      x-stability-level: stable
    patch:
      description: 'Update the name of a group''s service account by its ID.


        #### Required permissions


        - `Edit service accounts (group.service_account.edit)`'
      operationId: updateGroupServiceAccount
      parameters:
      - description: The ID of the Snyk Group that owns the service account.
        in: path
        name: group_id
        required: true
        schema:
          format: uuid
          type: string
      - description: The ID of the service account.
        in: path
        name: serviceaccount_id
        required: true
        schema:
          format: uuid
          type: string
      - $ref: '#/components/parameters/Version'
      requestBody:
        content:
          application/vnd.api+json:
            schema:
              additionalProperties: false
              properties:
                data:
                  additionalProperties: false
                  properties:
                    attributes:
                      additionalProperties: false
                      properties:
                        name:
                          description: A human-friendly name for the service account. Must be unique within the group.
                          type: string
                      required:
                      - name
                      type: object
                    id:
                      description: The ID of the service account. Must match the id in the url path.
                      format: uuid
                      type: string
                    type:
                      description: The Resource type.
                      enum:
                      - service_account
                      type: string
                  required:
                  - type
                  - id
                  - attributes
                  type: object
              required:
              - data
              type: object
        required: true
      responses:
        '200':
          content:
            application/vnd.api+json:
              schema:
                additionalProperties: false
                properties:
                  data:
                    $ref: '#/components/schemas/ServiceAccount'
                  jsonapi:
                    $ref: '#/components/schemas/JsonApi'
                  links:
                    $ref: '#/components/schemas/Links'
                required:
                - jsonapi
                - data
                - links
                type: object
          description: Service account is returned.
          headers:
            deprecation:
              $ref: '#/components/headers/DeprecationHeader'
            location:
              $ref: '#/components/headers/LocationHeader'
            snyk-request-id:
              $ref: '#/components/headers/RequestIdResponseHeader'
            snyk-version-lifecycle-stage:
              $ref: '#/components/headers/VersionStageResponseHeader'
            snyk-version-requested:
              $ref: '#/components/headers/VersionRequestedResponseHeader'
            snyk-version-served:
              $ref: '#/components/headers/VersionServedResponseHeader'
            sunset:
              $ref: '#/components/headers/SunsetHeader'
        '400':
          $ref: '#/components/responses/400'
        '401':
          $ref: '#/components/responses/401'
        '403':
          $ref: '#/components/responses/403'
        '404':
          $ref: '#/components/responses/404'
        '500':
          $ref: '#/components/responses/500'
      summary: Update a group service account.
      tags:
      - ServiceAccounts
      x-snyk-api-lifecycle: released
      x-snyk-api-releases:
      - '2023-09-07'
      x-snyk-api-resource: service_accounts
      x-snyk-api-stability: ga
      x-snyk-api-version: '2023-09-07'
      x-stability-level: stable
  /groups/{group_id}/service_accounts/{serviceaccount_id}/secrets:
    post:
      description: 'Manage the client secret of a group service account by the service account ID.


        #### Required permissions


        - `Edit service accounts (group.service_account.edit)`'
      operationId: updateServiceAccountSecret
      parameters:
      - description: The ID of the Snyk Group that owns the service account.
        in: path
        name: group_id
        required: true
        schema:
          format: uuid
          type: string
      - description: The ID of the service account.
        in: path
        name: serviceaccount_id
        required: true
        schema:
          format: uuid
          type: string
      - $ref: '#/components/parameters/Version'
      requestBody:
        content:
          application/vnd.api+json:
            schema:
              additionalProperties: false
              properties:
                data:
                  additionalProperties: false
                  properties:
                    attributes:
                      additionalProperties: false
                      properties:
                        mode:
                          description: "Operation to perform:\n  * `replace` - Replace existing secrets with a new generated secret.\n  * `create` - Add a new secret, preserving existing secrets. A maximum of to two secrets can exist at a time.\n  * `delete` - Remove an existing secret by value. At least one secret must remain per service account.\n"
                          enum:
                          - replace
                          - create
                          - delete
                          type: string
                        secret:
                          description: Secret to delete when using `delete` mode
                          type: string
                      required:
                      - mode
                      type: object
                    type:
                      description: The Resource type.
                      enum:
                      - service_account
                      type: string
                  required:
                  - attributes
                  - type
                  type: object
              required:
              - data
              type: object
        required: true
      responses:
        '200':
          content:
            application/vnd.api+json:
              schema:
                additionalProperties: false
                properties:
                  data:
                    $ref: '#/components/schemas/ServiceAccount'
                  jsonapi:
                    $ref: '#/components/schemas/JsonApi'
                  links:
                    $ref: '#/components/schemas/Links'
                required:
                - jsonapi
                - data
                type: object
          description: Service account client secret has been updated.
          headers:
            deprecation:
              $ref: '#/components/headers/DeprecationHeader'
            location:
              $ref: '#/components/headers/LocationHeader'
            snyk-request-id:
              $ref: '#/components/headers/RequestIdResponseHeader'
            snyk-version-lifecycle-stage:
              $ref: '#/components/headers/VersionStageResponseHeader'
            snyk-version-requested:
              $ref: '#/components/headers/VersionRequestedResponseHeader'
            snyk-version-served:
              $ref: '#/components/headers/VersionServedResponseHeader'
            sunset:
              $ref: '#/components/headers/SunsetHeader'
        '400':
          $ref: '#/components/responses/400'
        '401':
          $ref: '#/components/responses/401'
        '403':
          $ref: '#/components/responses/403'
        '404':
          $ref: '#/components/responses/404'
        '500':
          $ref: '#/components/responses/500'
      summary: Manage a group service account's client secret.
      tags:
      - ServiceAccounts
      x-snyk-api-lifecycle: released
      x-snyk-api-releases:
      - '2023-09-07'
      x-snyk-api-resource: service_accounts
      x-snyk-api-stability: ga
      x-snyk-api-version: '2023-09-07'
      x-stability-level: stable
  /orgs/{org_id}/service_accounts:
    get:
      description: 'Get all service accounts for an organization.


        #### Required permissions


        - `View service accounts (org.service_account.read)`'
      operationId: getManyOrgServiceAccounts
      parameters:
      - description: The ID of the Snyk Organization that owns the service accounts.
        in: path
        name: org_id
        required: true
        schema:
          format: uuid
          type: string
      - $ref: '#/components/parameters/StartingAfter'
      - $ref: '#/components/parameters/EndingBefore'
      - $ref: '#/components/parameters/Limit'
      - $ref: '#/components/parameters/Version'
      responses:
        '200':
          content:
            application/vnd.api+json:
              schema:
                additionalProperties: false
                properties:
                  data:
                    items:
                      $ref: '#/components/schemas/ServiceAccount'
                    type: array
                  jsonapi:
                    $ref: '#/components/schemas/JsonApi'
                  links:
                    $ref: '#/components/schemas/Links'
                required:
                - jsonapi
                - data
                - links
                type: object
          description: A list of service accounts is returned.
          headers:
            deprecation:
              $ref: '#/components/headers/DeprecationHeader'
            location:
              $ref: '#/components/headers/LocationHeader'
            snyk-request-id:
              $ref: '#/components/headers/RequestIdResponseHeader'
            snyk-version-lifecycle-stage:
              $ref: '#/components/headers/VersionStageResponseHeader'
            snyk-version-requested:
              $ref: '#/components/headers/VersionRequestedResponseHeader'
            snyk-version-served:
              $ref: '#/components/headers/VersionServedResponseHeader'
            sunset:
              $ref: '#/components/headers/SunsetHeader'
        '400':
          $ref: '#/components/responses/400'
        '401':
          $ref: '#/components/responses/401'
        '403':
          $ref: '#/components/responses/403'
        '404':
          $ref: '#/components/responses/404'
        '500':
          $ref: '#/components/responses/500'
      summary: Get a list of organization service accounts.
      tags:
      - ServiceAccounts
      x-snyk-api-lifecycle: released
      x-snyk-api-releases:
      - '2023-09-07'
      x-snyk-api-resource: service_accounts
      x-snyk-api-stability: ga
      x-snyk-api-version: '2023-09-07'
      x-stability-level: stable
    post:
      description: 'Create a service account for an organization. The service account can be used to access the Snyk API.


        #### Required permissions


        - `Create service accounts (org.service_account.create)`'
      operationId: createOrgServiceAccount
      parameters:
      - description: The ID of the Snyk Organization that is creating and will own the service account.
        in: path
        name: org_id
        required: true
        schema:
          format: uuid
          type: string
      - $ref: '#/components/parameters/Version'
      requestBody:
        content:
          application/vnd.api+json:
            schema:
              additionalProperties: false
              properties:
                data:
                  additionalProperties: false
                  properties:
                    attributes:
                      additionalProperties: false
                      properties:
                        access_token_expires_at:
                          description: The expiry date of the access token. Required only when auth_type is access_token.
                          example: '2025-08-16T00:00:00Z'
                          format: date-time
                          type: string
                        access_token_ttl_seconds:
                          description: The time, in seconds, that a generated oauth access token will be valid for. Defaults to 1 hour if unset. Only used when auth_type is one of the oauth_* variants.
                          maximum: 86400
                          minimum: 3600
                          type: number
                        auth_type:
                          description: "The authentication strategy for the service account:\n  * api_key - Regular Snyk API Key.\n  * oauth_client_secret - OAuth2 client_credentials grant, which returns a client secret that can be used to retrieve an oauth access token.\n  * oauth_private_key_jwt - OAuth2 client_credentials grant, using private_key_jwt client_assertion as laid out in OIDC Connect Core 1.0, section 9.\n  * access_token - Access tokens are long-lived, can be used more than once for increased flexibility, and have expiries for enhanced security."
                          enum:
                          - api_key
                          - oauth_client_secret
                          - oauth_private_key_jwt
                          - access_token
                          type: string
                        jwks_url:
                          description: A JWKs URL hosting your public keys, used to verify signed JWT requests. Must be https. Required only when auth_type is oauth_private_key_jwt.
                          type: string
                        name:
                          description: A human-friendly name for the service account.
                          type: string
                        role_id:
                          description: The ID of the role which the created service account should use. Obtained in the Snyk UI, via "Group Page" -> "Settings" -> "Member Roles" -> "Create new Role". Can be shared among multiple accounts.
                          format: uuid
                          type: string
                      required:
                      - name
                      - role_id
                      - auth_type
                      type: object
                    type:
                      description: The Resource type.
                      enum:
                      - service_account
                      type: string
                  required:
                  - attributes
                  type: object
              required:
              - data
              type: object
        required: true
      responses:
        '201':
          content:
            application/vnd.api+json:
              schema:
                additionalProperties: false
                properties:
                  data:
                    $ref: '#/components/schemas/ServiceAccount'
                  jsonapi:
                    $ref: '#/components/schemas/JsonApi'
                  links:
                    $ref: '#/components/schemas/Links'
                required:
                - jsonapi
                - data
                - links
                type: object
          description: A new service account has been created
          headers:
            deprecation:
              $ref: '#/components/headers/DeprecationHeader'
            location:
              $ref: '#/components/headers/LocationHeader'
            snyk-request-id:
              $ref: '#/components/headers/RequestIdResponseHeader'
            snyk-version-lifecycle-stage:
              $ref: '#/components/headers/VersionStageResponseHeader'
            snyk-version-requested:
              $ref: '#/components/headers/VersionRequestedResponseHeader'
            snyk-version-served:
              $ref: '#/components/headers/VersionServedResponseHeader'
            sunset:
              $ref: '#/components/headers/SunsetHeader'
        '400':
          $ref: '#/components/responses/400'
        '401':
          $ref: '#/components/responses/401'
        '404':
          $ref: '#/components/responses/404'
        '500':
          $ref: '#/components/responses/500'
      summary: Create a service account for an organization.
      tags:
      - ServiceAccounts
      x-snyk-api-lifecycle: released
      x-snyk-api-releases:
      - '2023-09-07'
      x-snyk-api-resource: service_accounts
      x-snyk-api-stability: ga
      x-snyk-api-version: '2023-09-07'
      x-stability-level: stable
  /orgs/{org_id}/service_accounts/{serviceaccount_id}:
    delete:
      description: 'Delete a service account in an organization.


        #### Required permissions


        - `Remove service accounts (org.service_account.delete)`'
      operationId: deleteServiceAccount
      parameters:
      - description: The ID of org to which the service account belongs.
        in: path
        name: org_id
        required: true
        schema:
          format: uuid
          type: string
      - description: The ID of the service account.
        in: path
        name: serviceaccount_id
        required: true
        schema:
          format: uuid
          type: string
      - $ref: '#/components/parameters/Version'
      responses:
        '204':
          description: The service account has been deleted.
          headers:
            deprecation:
              $ref: '#/components/headers/DeprecationHeader'
            snyk-request-id:
              $ref: '#/components/headers/RequestIdResponseHeader'
            snyk-version-lifecycle-stage:
              $ref: '#/components/headers/VersionStageResponseHeader'
            snyk-version-requested:
              $ref: '#/components/headers/VersionRequestedResponseHeader'
            snyk-version-served:
              $ref: '#/components/headers/VersionServedResponseHeader'
            sunset:
              $ref: '#/components/headers/SunsetHeader'
        '400':
          $ref: '#/components/responses/400'
        '401':
          $ref: '#/components/responses/401'
        '403':
          $ref: '#/components/responses/403'
        '404':
          $ref: '#/components/responses/404'
        '500':
          $ref: '#/components/responses/500'
      summary: Delete a service account in an organization.
      tags:
      - ServiceAccounts
      x-snyk-api-lifecycle: released
      x-snyk-api-releases:
      - '2023-09-07'
      x-snyk-api-resource: service_accounts
      x-snyk-api-stability: ga
      x-snyk-api-version: '2023-09-07'
      x-stability-level: stable
    get:
      description: 'Get an organization-level service account by its ID.


        #### Required permissions


        - `View service accounts (org.service_account.read)`'
      operationId: getOneOrgServiceAccount
      parameters:
      - description: The ID of the Snyk Organization that owns the service account.
        in: path
        name: org_id
        required: true
        schema:
          format: uuid
          type: string
      - description: The ID of the service accou

# --- truncated at 32 KB (59 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/snyk/refs/heads/main/openapi/snyk-serviceaccounts-api-openapi.yml