Endor Labs

https://docs.endorlabs.com
Admin
Endor Labs is a unified application security platform that helps you ship secure code by default...
Tokens:970,966
Snippets:7,475
Trust Score:7.5
Update:2 months ago
Show doc for...
Tokens:
Raw
### GET /v1/namespaces/{tenant_meta.namespace}/installations

Source: https://docs.endorlabs.com/api-reference/openapi.v3.json

Lists all installations.

```APIDOC
## GET /v1/namespaces/{tenant_meta.namespace}/installations

### Description
Lists all installations.

### Method
GET

### Endpoint
/v1/namespaces/{tenant_meta.namespace}/installations

### Parameters
#### Path Parameters
- **tenant_meta.namespace** (string) - Required - Namespaces are a way to organize organizational units into virtual groupings of resources.
```

--------------------------------

### Initialize the Endor Labs Agent Kit

Source: https://docs.endorlabs.com/secure-ai-coding/agent-kit/codex

Execute the setup skill to verify readiness and install bundled custom agents.

```text
Use the endor-agent-kit-setup skill to check readiness and install the bundled Codex custom agents.
```

--------------------------------

### GET /v1/namespaces/{tenant_meta.namespace}/installations/{uuid}

Source: https://docs.endorlabs.com/api-reference/openapi.v3.json

Fetches an installation identified by the UUID.

```APIDOC
## GET /v1/namespaces/{tenant_meta.namespace}/installations/{uuid}

### Description
Fetches an installation identified by the UUID.

### Method
GET

### Endpoint
/v1/namespaces/{tenant_meta.namespace}/installations/{uuid}

### Parameters
#### Path Parameters
- **tenant_meta.namespace** (string) - Required - Namespaces are a way to organize organizational units into virtual groupings of resources.
- **uuid** (string) - Required - The UUID of the requested resource.

#### Query Parameters
- **get_parameters.mask** (string) - Optional - List of fields to return (all fields are returned by default).
```

--------------------------------

### GET /v1/namespaces/{tenant_meta.namespace}/organization-installation-lists/{uuid}

Source: https://docs.endorlabs.com/api-reference/openapi.full.v3.json

Fetches the installation information of a platform organization.

```APIDOC
## GET /v1/namespaces/{tenant_meta.namespace}/organization-installation-lists/{uuid}

### Description
Fetches the installation information of a platform organization.

### Method
GET

### Endpoint
/v1/namespaces/{tenant_meta.namespace}/organization-installation-lists/{uuid}

### Parameters
#### Path Parameters
- **tenant_meta.namespace** (string) - Required - Namespaces are a way to organize organizational units into virtual groupings of resources.
- **uuid** (string) - Required - The UUID of the requested resource.

#### Query Parameters
- **get_parameters.mask** (string) - Optional - List of fields to return (all fields are returned by default).

### Response
#### Success Response (200)
- **v1OrganizationInstallationList** (object) - A successful response.
```

--------------------------------

### GET /v1/namespaces/{tenant_meta.namespace}/organization-installation-lists

Source: https://docs.endorlabs.com/api-reference/openapiv2.swagger.json

Lists the installation information of multiple platform organizations.

```APIDOC
## GET /v1/namespaces/{tenant_meta.namespace}/organization-installation-lists

### Description
Lists the installation information of multiple platform organizations.

### Method
GET

### Endpoint
/v1/namespaces/{tenant_meta.namespace}/organization-installation-lists

### Parameters
#### Path Parameters
- **tenant_meta.namespace** (string) - Required - Namespaces are a way to organize organizational units into virtual groupings of resources.

#### Query Parameters
- **list_parameters.filter** (string) - Optional - String of conditions to filter resources by.
- **list_parameters.page_token** (integer) - Optional - Set the page token to start from.
- **list_parameters.page_size** (integer) - Optional - Set the page size to limit the number of results returned. Default: 100. Max: 500.
- **list_parameters.action** (string) - Optional - Action to be executed with a request.
- **list_parameters.mask** (string) - Optional - List of fields to return.
- **list_parameters.traverse** (boolean) - Optional - Get data from any child namespaces as well.
- **list_parameters.sort.path** (string) - Optional - Field to sort objects by.

### Response
#### Success Response (200)
- **v1ListOrganizationInstallationListsResponse** (object) - A successful response containing the list of organization installations.
```

--------------------------------

### Run the setup skill

Source: https://docs.endorlabs.com/secure-ai-coding/agent-kit/antigravity-cli

Prompt to initiate the setup skill for checking environment readiness.

```text
Use the endor-agent-kit-setup skill to check Endor Labs Agent Kit readiness.
```

--------------------------------

### Install the Endor Labs Agent Kit extension

Source: https://docs.endorlabs.com/secure-ai-coding/agent-kit/gemini-cli

Clone the repository and install the extension into the Gemini CLI.

```bash
git clone https://github.com/endorlabs/ai-plugins
gemini extensions install ./ai-plugins/plugins/gemini/endor-labs-agent-kit
gemini extensions list
```

--------------------------------

### Install endorctl with Homebrew

Source: https://docs.endorlabs.com/developers-api/cli/install-and-configure

Use the Endor Labs tap to install the CLI on macOS and Linux.

```bash
brew install endorlabs/tap/endorctl
```

--------------------------------

### Validate and import rule-set examples

Source: https://docs.endorlabs.com/developers-api/cli/commands/rule-set

Examples for dry-running a validation or performing a full import of a rule archive.

```bash
endorctl rule-set import \
  --namespace my-org \
  --file-path ./my-rules.tar.gz \
  --rule-version v1.2.0 \
  --dry-run
```

```bash
endorctl rule-set import \
  --namespace my-org \
  --file-path ./my-rules.tar.gz \
  --rule-version v1.2.0
```

--------------------------------

### Install and Configure endorctl with npm

Source: https://docs.endorlabs.com/developers-api/cli/install-and-configure

Install the CLI globally via npm and configure the shell path.

```bash
npm install -g endorctl
```

```bash
npm config get prefix
```

```bash
export PATH="/path/to/npm/global/bin:$PATH"
```

```bash
endorctl --version
```

```bash
npm update -g endorctl
```

--------------------------------

### Scan an example repository

Source: https://docs.endorlabs.com/setup-deployment/cli/scan-using-endorctl

Steps to clone, build, and scan a sample Java project.

```bash
git clone https://github.com/OWASP-Benchmark/BenchmarkJava.git
```

```bash
cd BenchmarkJava
```

```bash
mvn clean install
```

```bash
endorctl scan
```

--------------------------------

### Render Deployment Setup Plan

Source: https://docs.endorlabs.com/setup-deployment/scm-integrations/index

Generates a summary view of selected SCM configurations and required setup checklist items.

```javascript
const renderPlanOutput = () => {
    let hasSelections = false;
    steps.forEach(step => {
      if (step.type === 'choice_grid' && getSelectedItem(step.data_key, selections)) hasSelections = true;
    });
    if (!hasSelections) return <div style={{
      background: bgLight,
      border: '1px solid ' + bd + '0.12)',
      borderRadius: '12px',
      padding: '0.75rem',
      fontSize: '0.9rem'
    }}>Make selections to generate a plan.</div>;
    const selItems = [];
    steps.forEach(step => {
      if (step.type === 'choice_grid') {
        const item = getSelectedItem(step.data_key, selections);
        if (item) selItems.push({
          label: step.label || step.data_key,
          value: item.label || item.title || item.id
        });
      }
    });
    const checkItems = [];
    steps.forEach(step => {
      if (step.type === 'choice_grid') {
        const item = getSelectedItem(step.data_key, selections);
        if (!item) return;
        if (item.pre_setup_title && item.docs) checkItems.push({
          title: item.pre_setup_title,
          docs: getDocEntries(item.docs),
          warning: item.warning
        }); else if (item.docs) {
          if (item.docs.overview_url) checkItems.push({
            title: getDocLabel(item.docs, 'overview_url', 'Installation guide'),
            url: item.docs.overview_url
          });
          if (item.docs.manage_url) checkItems.push({
            title: getDocLabel(item.docs, 'manage_url', 'Configuration guide'),
            url: item.docs.manage_url
          });
        }
      }
    });
    const optSections = [];
    steps.forEach(step => {
      if (step.type === 'checkbox_group') {
        const items = config[step.data_key] || [];
        if (items.length > 0) optSections.push({
          label: step.label || step.title || 'Options',
          items
        });
      }
    });
    const extraDocs = [];
    steps.forEach(step => {
      if (step.type === 'choice_grid') {
        const item = getSelectedItem(step.data_key, selections);
        if (item?.docs && !item.pre_setup_title) Object.keys(item.docs).forEach(k => {
          if (k.endsWith('_url') && k !== 'overview_url' && k !== 'manage_url') extraDocs.push({
            url: item.docs[k],
            label: getDocLabel(item.docs, k, k.replace(/_url$/, ''))
          });
        });
      }
    });
    return <div style={{
      background: bgLight,
      border: '1px solid ' + bd + '0.12)',
      borderRadius: '12px',
      padding: '0.75rem',
      fontSize: '0.9rem',
      lineHeight: 1.45
    }}>
        <h4 style={{
      margin: '0 0 0.4rem',
      fontSize: '0.95rem',
      fontWeight: 700
    }}>Setup plan: {config.wizard.title || 'Setup Wizard'}</h4>
        <h5 style={h5s}>Selections</h5>
        <ul style={{
      margin: '0.25rem 0 0.25rem 1.25rem'
    }}>{selItems.map(s => <li key={s.label} style={{
      margin: '0.2rem 0'
    }}>{s.label}: <code style={codeStyle}>{s.value}</code></li>)}</ul>
        <h5 style={h5s}>Checklist</h5>
        <ol style={{
      margin: '0.25rem 0 0.25rem 1.25rem'
    }}>
          {checkItems.map(c => <li key={c.url || c.title} style={{
      margin: '0.2rem 0'
    }}>
              {c.url ? <a href={c.url} style={{
      textDecoration: 'underline'
```

--------------------------------

### POST /v1/namespaces/{tenant_meta.namespace}/organization-installation-lists

Source: https://docs.endorlabs.com/api-reference/openapi.full.v3.json

Creates the installation information of a platform organization.

```APIDOC
## POST /v1/namespaces/{tenant_meta.namespace}/organization-installation-lists

### Description
Creates the installation information of a platform organization.

### Method
POST

### Endpoint
/v1/namespaces/{tenant_meta.namespace}/organization-installation-lists

### Parameters
#### Path Parameters
- **tenant_meta.namespace** (string) - Required - Namespaces are a way to organize organizational units into virtual groupings of resources.

### Response
#### Success Response (200)
- **v1OrganizationInstallationList** (object) - A successful response.
```

--------------------------------

### Deploy Outpost with GCP Authentication

Source: https://docs.endorlabs.com/setup-deployment/outpost/outpost-configuration

Example Helm installation command configured for GCP service account authentication.

```bash
helm install endorlabsscheduler oci://endorcipublic.azurecr.io/charts/onprem-scheduler \
    -n <k8s-ns> \
    --set endorAPI=https://api.endorlabs.com \
    --set endorNamespace=nryn \
    --set auth.gcpServiceAccountName=endor-scanner-sa@project-name-123456.iam.gserviceaccount.com \
    --set scheduler.serviceAccount.annotations.iam.gke.io/gcp-service-account="endor-scanner-sa@project-name-123456.iam.gserviceaccount.com" \
    --set endorctl.serviceAccount.annotations.iam.gke.io/gcp-service-account="endor-scanner-sa@project-name-123456.iam.gserviceaccount.com" \
    --set bazelremote.install=false
```

--------------------------------

### POST /v1/namespaces/{tenant_meta.namespace}/installations

Source: https://docs.endorlabs.com/api-reference/openapi.v3.json

Creates a new installation within the specified namespace.

```APIDOC
## POST /v1/namespaces/{tenant_meta.namespace}/installations

### Description
Creates a new installation within the specified namespace.

### Method
POST

### Endpoint
/v1/namespaces/{tenant_meta.namespace}/installations

### Parameters
#### Path Parameters
- **tenant_meta.namespace** (string) - Required - Namespaces are a way to organize organizational units into virtual groupings of resources.

### Response
#### Success Response (200)
- **v1Installation** (object) - A successful response.
```

--------------------------------

### Package Firewall Block Output (npm/pnpm)

Source: https://docs.endorlabs.com/integrations/package-firewall/direct-integration

Example of the error output received when a package installation is blocked by the firewall.

```text
Packages: +1
+
[ERR_PNPM_FETCH_403] GET https://factory.endorlabs.com/v1/namespaces/johndoe/firewall/npm/endor-firewall-test/-/endor-firewall-test-1.0.0.tgz: Forbidden - 403

This error happened while installing a direct dependency of /Users/local-dev/Code/sample-projecr

//factory.endorlabs.com/v1/namespaces/johndoe/firewall/npm/:_auth=ZW5k[hidden]
//factory.endorlabs.com/v1/namespaces/johndoe/firewall/npm/:_username=xxxxx
//factory.endorlabs.com/v1/namespaces/johndoe/firewall/npm/:_password=[hidden]
Progress: resolved 1, reused 0, downloaded 0, added 0
```

--------------------------------

### Plan and Checklist Generation

Source: https://docs.endorlabs.com/agent-governance

Constructs the final setup plan text and documentation checklist based on user choices.

```javascript
  const buildChecklistLines = lines => {
    let sn = 1;
    steps.forEach(step => {
      if (step.type !== 'choice_grid') return;
      const item = getSelectedItem(step.data_key, selections);
      if (!item) return;
      if (item.pre_setup_title && item.docs) {
        lines.push(sn + ') ' + item.pre_setup_title);
        getDocEntries(item.docs).forEach(d => lines.push('   - ' + d.label + ': ' + d.url));
        if (item.warning) lines.push('   Important: ' + item.warning);
        sn++;
      } else if (item.docs) {
        if (item.docs.overview_url) {
          lines.push(sn + ') ' + getDocLabel(item.docs, 'overview_url', 'Install'), '   - ' + item.docs.overview_url);
          sn++;
        }
        if (item.docs.manage_url) {
          lines.push(sn + ') ' + getDocLabel(item.docs, 'manage_url', 'Configure'), '   - ' + item.docs.manage_url);
          sn++;
        }
      }
    });
  };
  const buildPlanText = () => {
    const lines = ['Setup plan: ' + (config.wizard.title || 'Setup Wizard'), '', 'Selections'];
    steps.forEach(step => {
      if (step.type === 'choice_grid') {
        const item = getSelectedItem(step.data_key, selections);
        if (item) lines.push('- ' + (step.label || step.data_key) + ': ' + (item.label || item.title || item.id));
      }
    });
    lines.push('', 'Checklist');
    buildChecklistLines(lines);
    const caps = getProviderCaps();
    const isSupported = item => {
```

--------------------------------

### List Scan Results API Requests

Source: https://docs.endorlabs.com/api-reference/scanresultservice/listscanresults

Examples of how to perform a GET request to the scan-results endpoint using different programming languages.

```curl
curl --request GET \
  --url https://api.endorlabs.com/v1/namespaces/{tenant_meta.namespace}/scan-results
```

```python
import requests

url = "https://api.endorlabs.com/v1/namespaces/{tenant_meta.namespace}/scan-results"

response = requests.get(url)

print(response.text)
```

```javascript
const options = {method: 'GET'};

fetch('https://api.endorlabs.com/v1/namespaces/{tenant_meta.namespace}/scan-results', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));
```

```php
<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.endorlabs.com/v1/namespaces/{tenant_meta.namespace}/scan-results",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}
```

```go
package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.endorlabs.com/v1/namespaces/{tenant_meta.namespace}/scan-results"

	req, _ := http.NewRequest("GET", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}
```

```java
HttpResponse<String> response = Unirest.get("https://api.endorlabs.com/v1/namespaces/{tenant_meta.namespace}/scan-results")
  .asString();
```

```ruby
require 'uri'
require 'net/http'

url = URI("https://api.endorlabs.com/v1/namespaces/{tenant_meta.namespace}/scan-results")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)

response = http.request(request)
puts response.read_body
```

--------------------------------

### POST /v1/namespaces/{tenant_meta.namespace}/installations

Source: https://docs.endorlabs.com/api-reference/openapi.full.v3.json

Creates a new installation or performs an upsert if the external ID and platform resource already exist.

```APIDOC
## POST /v1/namespaces/{tenant_meta.namespace}/installations

### Description
Creates a installation. The creation of the resource will be an upsert if the given spec.external_id and spec.platform_resource were already created.

### Method
POST

### Endpoint
/v1/namespaces/{tenant_meta.namespace}/installations

### Parameters
#### Path Parameters
- **tenant_meta.namespace** (string) - Required - Namespaces are a way to organize organizational units into virtual groupings of resources.

### Response
#### Success Response (200)
- **v1Installation** (object) - A successful response.
```

--------------------------------

### Retrieve Exporter Details

Source: https://docs.endorlabs.com/api-reference/exporterservice/getexporter

Examples for performing a GET request to retrieve an exporter resource. Replace {tenant_meta.namespace} and {uuid} with the appropriate values.

```curl
curl --request GET \
  --url https://api.endorlabs.com/v1/namespaces/{tenant_meta.namespace}/exporters/{uuid}
```

```python
import requests

url = "https://api.endorlabs.com/v1/namespaces/{tenant_meta.namespace}/exporters/{uuid}"

response = requests.get(url)

print(response.text)
```

```javascript
const options = {method: 'GET'};

fetch('https://api.endorlabs.com/v1/namespaces/{tenant_meta.namespace}/exporters/{uuid}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));
```

```php
<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.endorlabs.com/v1/namespaces/{tenant_meta.namespace}/exporters/{uuid}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}
```

```go
package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.endorlabs.com/v1/namespaces/{tenant_meta.namespace}/exporters/{uuid}"

	req, _ := http.NewRequest("GET", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}
```

```java
HttpResponse<String> response = Unirest.get("https://api.endorlabs.com/v1/namespaces/{tenant_meta.namespace}/exporters/{uuid}")
  .asString();
```

```ruby
require 'uri'
require 'net/http'

url = URI("https://api.endorlabs.com/v1/namespaces/{tenant_meta.namespace}/exporters/{uuid}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)

response = http.request(request)
puts response.read_body
```

--------------------------------

### Make a GET request with curl

Source: https://docs.endorlabs.com/developers-api/rest-api/using-the-rest-api/getting-started

Examples of using curl to query findings, demonstrating both direct URL encoding and the --data-urlencode option.

```bash
curl --request GET \
  --header "Authorization: Bearer $ENDOR_TOKEN" \
  --compressed \
  --header "Content-Type: application/jsoncompact" \
  --url "https://api.endorlabs.com/v1/namespaces/$ENDOR_NAMESPACE/findings?list_parameters.filter=spec.finding_tags%20contains%20FINDING_TAGS_REACHABLE_FUNCTION"
```

```bash
curl --request GET \
  --header "Authorization: Bearer $ENDOR_TOKEN" \
  --compressed \
  --header "Content-Type: application/jsoncompact" \
  --data-urlencode "spec.finding_tags contains FINDING_TAGS_REACHABLE_FUNCTION" \
  "https://api.endorlabs.com/v1/namespaces/$ENDOR_NAMESPACE/findings"
```

--------------------------------

### Retrieve Notification via HTTP Requests

Source: https://docs.endorlabs.com/api-reference/notificationservice/getnotification

Examples of how to perform a GET request to the notification endpoint using various programming languages and tools.

```curl
curl --request GET \
  --url https://api.endorlabs.com/v1/namespaces/{tenant_meta.namespace}/notifications/{uuid}
```

```python
import requests

url = "https://api.endorlabs.com/v1/namespaces/{tenant_meta.namespace}/notifications/{uuid}"

response = requests.get(url)

print(response.text)
```

```javascript
const options = {method: 'GET'};

fetch('https://api.endorlabs.com/v1/namespaces/{tenant_meta.namespace}/notifications/{uuid}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));
```

```php
<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.endorlabs.com/v1/namespaces/{tenant_meta.namespace}/notifications/{uuid}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}
```

```go
package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.endorlabs.com/v1/namespaces/{tenant_meta.namespace}/notifications/{uuid}"

	req, _ := http.NewRequest("GET", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}
```

```java
HttpResponse<String> response = Unirest.get("https://api.endorlabs.com/v1/namespaces/{tenant_meta.namespace}/notifications/{uuid}")
  .asString();
```

```ruby
require 'uri'
require 'net/http'

url = URI("https://api.endorlabs.com/v1/namespaces/{tenant_meta.namespace}/notifications/{uuid}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)

response = http.request(request)
puts response.read_body
```

--------------------------------

### Deploy Outpost with Azure Managed Identity

Source: https://docs.endorlabs.com/setup-deployment/outpost/outpost-configuration

Example Helm installation command configured for Azure managed identity authentication and build tool caching.

```bash
helm install endorlabsscheduler oci://endorcipublic.azurecr.io/charts/onprem-scheduler \
     -n endor \
     --set endorAPI=https://api.endorlabs.com \
     --set endorNamespace=endor \
     --set auth.azureManagedIdentityClientID=12a34b56-7c89-0d1e-2f34-567g890h1234 \
     --set bazelremote.install=true
```

--------------------------------

### Verify Python pip builds

Source: https://docs.endorlabs.com/setup-deployment/cli

Set up a virtual environment and install dependencies.

```bash
python3 -m venv venv
source venv/bin/activate
venv/bin/python3 -m pip install
```

--------------------------------

### GET /v1/namespaces/{namespace}/findings

Source: https://docs.endorlabs.com/developers-api/rest-api/using-the-rest-api/grouping

Retrieves a list of findings grouped by a specified time interval. This example demonstrates filtering for critical findings and grouping them by creation time in two-week intervals.

```APIDOC
## GET /v1/namespaces/{namespace}/findings

### Description
Retrieves findings filtered by criteria and grouped by a specified time interval. This allows for time-series analysis of findings.

### Method
GET

### Endpoint
https://api.endorlabs.com/v1/namespaces/{namespace}/findings

### Parameters
#### Path Parameters
- **namespace** (string) - Required - The namespace identifier.

#### Query Parameters
- **list_parameters.filter** (string) - Optional - Filter expression (e.g., spec.level==FINDING_LEVEL_CRITICAL).
- **list_parameters.group_by_time.aggregation_paths** (string) - Optional - The field path to aggregate by (e.g., meta.create_time).
- **list_parameters.group_by_time.interval** (string) - Optional - The time interval unit (e.g., GROUP_BY_TIME_INTERVAL_WEEK).
- **list_parameters.group_by_time.group_size** (integer) - Optional - The number of intervals to group together.
- **list_parameters.group_by_time.show_aggregation_uuids** (boolean) - Optional - Whether to include the list of UUIDs for each group.

### Response
#### Success Response (200)
- **groups** (object) - A map of time-bucketed groups containing aggregation counts and UUIDs.

#### Response Example
{
  "group_response": {
    "groups": {
      "2024-01-28T00:00:00Z": {
        "aggregation_count": { "count": 7 },
        "aggregation_uuids": ["65c02da021a5d767fc147ec0", ...]
      }
    }
  }
}
```

--------------------------------

### Install TypeScript version by Node.js version

Source: https://docs.endorlabs.com/scan/sca/javascript

Commands to install the compatible TypeScript version based on the installed Node.js environment.

```bash
npm install -g typescript@6
```

```bash
npm install -g typescript@5.0
```

```bash
npm install -g typescript@4.9
```

--------------------------------

### Create GCP Virtual Machine Instance

Source: https://docs.endorlabs.com/setup-deployment/ci-cd/keyless-authentication/google-keyless-auth

Provision a new VM instance with the necessary service account and cloud-platform scopes.

```bash
gcloud compute instances create test-keyless --service-account endorlabs-compute-service@$PROJECT.iam.gserviceaccount.com --scopes https://www.googleapis.com/auth/cloud-platform
```

--------------------------------

### Check Bazel Installation

Source: https://docs.endorlabs.com/scan/bazel/bazel-aspects

Verify that Bazel is correctly installed and accessible in your environment.

```bash
bazel version
```

--------------------------------

### POST /v1/namespaces/{tenant_meta.namespace}/system-config

Source: https://docs.endorlabs.com/api-reference/openapi.v3.json

Creates a new system configuration object within the specified namespace.

```APIDOC
## POST /v1/namespaces/{tenant_meta.namespace}/system-config

### Description
Creates a system configuration object.

### Method
POST

### Endpoint
/v1/namespaces/{tenant_meta.namespace}/system-config

### Parameters
#### Path Parameters
- **tenant_meta.namespace** (string) - Required - Namespaces are a way to organize organizational units into virtual groupings of resources.

### Response
#### Success Response (200)
- **v1SystemConfig** (object) - A successful response.
```

--------------------------------

### Define a .NET project file

Source: https://docs.endorlabs.com/scan/sca/dotnet

Example of a standard .csproj file structure defining target frameworks and package references.

```xml
<Project Sdk="Microsoft.NET.Sdk">
  <PropertyGroup>
    <TargetFrameworks>net8</TargetFrameworks>
  </PropertyGroup>
  <ItemGroup>
    <PackageReference Include="Newtonsoft.Json" Version="13.0.3" />
  </ItemGroup>
</Project>
```

--------------------------------

### Verify curl Installation

Source: https://docs.endorlabs.com/developers-api/rest-api/using-the-rest-api/getting-started

Check if the curl utility is installed on the local machine.

```bash
curl --version
```

--------------------------------

### In Filter Examples

Source: https://docs.endorlabs.com/developers-api/rest-api/using-the-rest-api/filters

Examples of using the in and not in operators to match field values against a set.

```text
spec.finding_level in [FINDING_LEVEL_CRITICAL, FINDING_LEVEL_HIGH]
```

```text
spec.ecosystem not in [ECOSYSTEM_MAVEN, ECOSYSTEM_NPM]
```

--------------------------------

### Create and Configure Virtual Environment for Pip

Source: https://docs.endorlabs.com/scan/sca/python

Commands to initialize a virtual environment and install dependencies for pip or setuptools projects.

```bash
python3 -m venv venv
```

```bash
venv/bin/python -m pip install -r requirements.txt
```

```bash
venv/bin/python -m pip install
```

--------------------------------

### Install Cursor SDK dependencies

Source: https://docs.endorlabs.com/secure-ai-coding/agent-kit/cursor-sdk

Install the required Python dependencies for the Cursor SDK.

```bash
python3 -m pip install -r cursor-sdk/requirements.txt
```

```bash
uv pip install -r requirements.txt
```

--------------------------------

### Build sbt project

Source: https://docs.endorlabs.com/scan/sca/scala

Commands to compile the project and list available projects in sbt.

```bash
sbt compile
```

```bash
sbt projects
```

--------------------------------

### Contains Filter Examples

Source: https://docs.endorlabs.com/developers-api/rest-api/using-the-rest-api/filters

Examples of using the contains and not contains operators for list fields.

```text
spec.finding_tags contains [FINDING_TAGS_FIX_AVAILABLE, FINDING_TAGS_REACHABLE_FUNCTION]
```

```text
spec.finding_tags contains [FINDING_TAGS_FIX_AVAILABLE] and spec.finding_tags contains [FINDING_TAGS_REACHABLE_FUNCTION]
```

```text
meta.tags not contains [sanity, test]
```

--------------------------------

### Setup hooks script

Source: https://docs.endorlabs.com/scan/secrets/scan-secrets

Automate the deployment of hooks to the .git/hooks directory across different systems.

```bash
sh setup-hooks.sh
#!/bin/sh
# Copy all hooks to .git/hooks
cp hooks/* .git/hooks/
chmod +x .git/hooks/*
```

--------------------------------

### Get MCPServerLog API Definition

Source: https://docs.endorlabs.com/api-reference/openapiv2.swagger.json

Defines the GET operation for retrieving an MCPServerLog by its UUID.

```json
"/v1/namespaces/{tenant_meta.namespace}/mcp-server-logs/{uuid}": {
      "get": {
        "summary": "GetMCPServerLog",
        "description": "Fetches an MCPServerLog specified by its UUID.",
        "operationId": "MCPServerLogService_GetMCPServerLog",
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1MCPServerLog"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/googlerpcStatus"
            }
          }
        },
        "parameters": [
          {
            "name": "tenant_meta.namespace",
            "description": "Namespaces are a way to organize organizational units into virtual\ngroupings of resources. Namespaces must be a fully qualified name,\nfor example, the child namespace of namespace \"endor.prod\" called \"app\"\nis called \"endor.prod.app\".",
            "in": "path",
            "required": true,
            "type": "string",
            "x-endor-name": "Namespace"
          },
          {
            "name": "uuid",
            "description": "The UUID of the requested resource.",
            "in": "path",
            "required": true,
            "type": "string"
          },
          {
            "name": "get_parameters.mask",
            "description": "List of fields to return (all fields are returned by default).",
            "in": "query",
            "required": false,
            "type": "string"
          }
        ],
        "tags": [
          "MCPServerLogService"
        ],
        "x-internal": true
      }
```

--------------------------------

### Prepare Go Project Dependencies

Source: https://docs.endorlabs.com/scan/sca/golang

Commands to ensure the go.mod file is well-formed and dependencies are correctly resolved before scanning.

```bash
go mod tidy
```

```bash
go get ./
```

--------------------------------

### Build Scala projects

Source: https://docs.endorlabs.com/setup-deployment/cli/index

Commands for sbt and Gradle build systems.

```bash
sbt projects
sbt compile
sbt dependencyTree
```

```bash
gradle dependencies --configuration runtimeClasspath
./gradlew assemble
# Use `gradle assemble` if you do not have a gradle wrapper in your repository
```

--------------------------------

### GET /v1/namespaces/{tenant_meta.namespace}/package-license-overrides/{uuid}

Source: https://docs.endorlabs.com/api-reference/openapi.full.v3.json

Gets a package license override by its UUID.

```APIDOC
## GET /v1/namespaces/{tenant_meta.namespace}/package-license-overrides/{uuid}

### Description
Gets a package license override by its UUID.

### Method
GET

### Endpoint
/v1/namespaces/{tenant_meta.namespace}/package-license-overrides/{uuid}

### Parameters
#### Path Parameters
- **tenant_meta.namespace** (string) - Required - Namespaces are a way to organize organizational units into virtual groupings of resources.
- **uuid** (string) - Required - The UUID of the requested resource.

#### Query Parameters
- **get_parameters.mask** (string) - Optional - List of fields to return (all fields are returned by default).

### Response
#### Success Response (200)
- **v1PackageLicenseOverride** (object) - A successful response.
```

--------------------------------

### View toolchains help

Source: https://docs.endorlabs.com/developers-api/cli/commands/toolchains

Displays available options and arguments for the toolchains command.

```bash
endorctl toolchains --help
```
Tokens:
Raw