@socketsecurity/sdk 3.1.2 → 3.2.0

package/types/api.d.ts

@@ -13,6 +13,8 @@ export interface paths {
      * CycloneDX SBOMs use the purl format to identify components.
      * This endpoint supports fetching metadata and alerts for multiple packages at once by passing an array of purl strings, or by passing an entire CycloneDX report.
      *
+     * **Note:** This endpoint has a batch size limit (default: 1024 PURLs per request). Requests exceeding this limit will return a 400 Bad Request error.
+     *
      * More information on purl and CycloneDX:
      *
      * - [`purl` Spec](https://github.com/package-url/purl-spec)
@@ -212,6 +214,34 @@ export interface paths {
      */
     get: operations['GetOrgFullScanDiffGfm']
   }
+  '/orgs/{org_slug}/full-scans/{full_scan_id}/files/tar': {
+    /**
+     * Download full scan files as tarball
+     * @description Download all files associated with a full scan in tar format.
+     *
+     * This endpoint consumes 1 unit of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - full-scans:list
+     */
+    get: operations['downloadOrgFullScanFilesAsTar']
+  }
+  '/orgs/{org_slug}/full-scans/archive': {
+    /**
+     * Create full scan from archive
+     * @description Create a full scan by uploading one or more archives. Supported archive formats include **.tar**, **.tar.gz/.tgz**, and **.zip**.
+     *
+     * Each uploaded archive is extracted server-side and any supported manifest files (like package.json, package-lock.json, pnpm-lock.yaml, etc.) are ingested for the scan. If you upload multiple archives in a single request, the manifests from every archive are merged into one full scan. The response includes any files that were ignored.
+     *
+     * The maximum combined number of files extracted from your upload is 5000 and each extracted file can be no bigger than 67 MB.
+     *
+     * This endpoint consumes 1 unit of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - full-scans:create
+     */
+    post: operations['CreateOrgFullScanArchive']
+  }
   '/orgs/{org_slug}/export/cdx/{id}': {
     /**
      * Export CycloneDX SBOM (Beta)
@@ -901,6 +931,107 @@ export interface paths {
      */
     get: operations['getOrgThreatFeedItems']
   }
+  '/orgs/{org_slug}/fixes': {
+    /**
+     * Fetch fixes for vulnerabilities in a repository or scan
+     * @description Fetches available fixes for vulnerabilities in a repository or scan.
+     * Requires either repo_slug or full_scan_id as well as vulnerability_ids to be provided.
+     * vulnerability_ids can be a comma-separated list of GHSA or CVE IDs, or "*" for all vulnerabilities.
+     *
+     * This endpoint consumes 10 units of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - fixes:list
+     */
+    get: operations['fetch-fixes']
+  }
+  '/orgs/{org_slug}/telemetry/config': {
+    /**
+     * Get Organization Telemetry Config
+     * @description Retrieve the telemetry config of an organization.
+     *
+     * This endpoint consumes 1 unit of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     */
+    get: operations['getOrgTelemetryConfig']
+    /**
+     * Update Telemetry Config
+     * @description Update the telemetry config of an organization.
+     *
+     * This endpoint consumes 1 unit of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - telemetry-policy:update
+     */
+    put: operations['updateOrgTelemetryConfig']
+  }
+  '/orgs/{org_slug}/webhooks': {
+    /**
+     * List all webhooks
+     * @description List all webhooks in the specified organization.
+     *
+     * This endpoint consumes 1 unit of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - webhooks:list
+     */
+    get: operations['getOrgWebhooksList']
+    /**
+     * Create a webhook
+     * @description Create a new webhook. Returns the created webhook details.
+     *
+     * This endpoint consumes 1 unit of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - webhooks:create
+     */
+    post: operations['createOrgWebhook']
+  }
+  '/orgs/{org_slug}/webhooks/{webhook_id}': {
+    /**
+     * Get webhook
+     * @description Get a webhook for the specified organization.
+     *
+     * This endpoint consumes 1 unit of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - webhooks:list
+     */
+    get: operations['getOrgWebhook']
+    /**
+     * Update webhook
+     * @description Update details of an existing webhook.
+     *
+     * This endpoint consumes 1 unit of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - webhooks:update
+     */
+    put: operations['updateOrgWebhook']
+    /**
+     * Delete webhook
+     * @description Delete a webhook. This will stop all future webhook deliveries to the webhook URL.
+     *
+     * This endpoint consumes 1 unit of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - webhooks:delete
+     */
+    delete: operations['deleteOrgWebhook']
+  }
+  '/orgs/{org_slug}/alerts': {
+    /**
+     * List latest alerts (Beta)
+     * @description List latest alerts.
+     *
+     * This endpoint consumes 10 units of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - alerts:list
+     */
+    get: operations['alertsList']
+  }
   '/license-policy': {
     /**
      * License Policy (Beta)
@@ -1502,6 +1633,11 @@ export interface components {
           _type: 'purlError'
           value: components['schemas']['PurlErrorSchema']
         }
+      | {
+          /** @enum {string} */
+          _type: 'summary'
+          value: components['schemas']['PurlSummarySchema']
+        }
     SocketBatchPURLFetch: {
       components: Array<components['schemas']['SocketBatchPURLRequest']>
     }
@@ -1884,6 +2020,18 @@ export interface components {
       /** @default */
       inputPurl: string
     }
+    PurlSummarySchema: {
+      /** @default 0 */
+      purl_input: number
+      /** @default 0 */
+      resolved: number
+      errors: {
+        /** @default 0 */
+        purl_malformed: number
+        /** @default 0 */
+        package_not_found: number
+      }
+    }
     SocketBatchPURLRequest: {
       /** @default */
       purl: string
@@ -4229,6 +4377,7 @@ export interface components {
      * @enum {string}
      */
     SocketPURL_Type:
+      | 'alpm'
       | 'apk'
       | 'bitbucket'
       | 'cocoapods'
@@ -4258,6 +4407,7 @@ export interface components {
       | 'rpm'
       | 'swid'
       | 'swift'
+      | 'vscode'
       | 'unknown'
     /**
      * @default low
@@ -4660,6 +4810,8 @@ export interface operations {
    * CycloneDX SBOMs use the purl format to identify components.
    * This endpoint supports fetching metadata and alerts for multiple packages at once by passing an array of purl strings, or by passing an entire CycloneDX report.
    *
+   * **Note:** This endpoint has a batch size limit (default: 1024 PURLs per request). Requests exceeding this limit will return a 400 Bad Request error.
+   *
    * More information on purl and CycloneDX:
    *
    * - [`purl` Spec](https://github.com/package-url/purl-spec)
@@ -4746,6 +4898,10 @@ export interface operations {
         licensedetails?: boolean
         /** @description Return errors found with handling PURLs as error objects in the stream. */
         purlErrors?: boolean
+        /** @description Return only cached results, do not attempt to scan new artifacts or rescan stale results. */
+        cachedResultsOnly?: boolean
+        /** @description Include a summary object at the end of the stream with counts of malformed, resolved, and not found PURLs. */
+        summary?: boolean
       }
     }
     requestBody?: {
@@ -5025,10 +5181,16 @@ export interface operations {
         commit_hash?: string
         /** @description The pull request number to associate the full-scan with. */
         pull_request?: number
-        /** @description The committers to associate the full-scan with. Set query more than once to set multiple. */
+        /** @description The committers to associate with the full-scan. Set query more than once to set multiple. */
         committers?: string
         /** @description The integration type to associate the full-scan with. Defaults to "Api" if omitted. */
-        integration_type?: 'api' | 'github' | 'gitlab' | 'bitbucket' | 'azure'
+        integration_type?:
+          | 'api'
+          | 'github'
+          | 'gitlab'
+          | 'bitbucket'
+          | 'azure'
+          | 'web'
         /** @description The integration org slug to associate the full-scan with. If omitted, the Socket org name will be used. This is used to generate links and badges. */
         integration_org_slug?: string
         /** @description Set the default branch of the repository to the branch of this full-scan. A branch name is required with this option. */
@@ -5502,6 +5664,164 @@ export interface operations {
       429: components['responses']['SocketTooManyRequestsResponse']
     }
   }
+  /**
+   * Download full scan files as tarball
+   * @description Download all files associated with a full scan in tar format.
+   *
+   * This endpoint consumes 1 unit of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - full-scans:list
+   */
+  downloadOrgFullScanFilesAsTar: {
+    parameters: {
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+        /** @description The ID of the full scan */
+        full_scan_id: string
+      }
+    }
+    responses: {
+      /** @description Tar archive of full scan files */
+      200: {
+        content: {
+          'application/x-tar': unknown
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
+  /**
+   * Create full scan from archive
+   * @description Create a full scan by uploading one or more archives. Supported archive formats include **.tar**, **.tar.gz/.tgz**, and **.zip**.
+   *
+   * Each uploaded archive is extracted server-side and any supported manifest files (like package.json, package-lock.json, pnpm-lock.yaml, etc.) are ingested for the scan. If you upload multiple archives in a single request, the manifests from every archive are merged into one full scan. The response includes any files that were ignored.
+   *
+   * The maximum combined number of files extracted from your upload is 5000 and each extracted file can be no bigger than 67 MB.
+   *
+   * This endpoint consumes 1 unit of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - full-scans:create
+   */
+  CreateOrgFullScanArchive: {
+    parameters: {
+      query: {
+        /** @description The slug of the repository to associate the full-scan with. */
+        repo: string
+        /** @description The workspace of the repository to associate the full-scan with. */
+        workspace?: string
+        /** @description The branch name to associate the full-scan with. Branch names must follow Git branch name rules: be 1–255 characters long; cannot be exactly @;  cannot begin or end with /, ., or .lock; cannot contain "//", "..", or "@{"; and cannot include control characters, spaces, or any of ~^:?*[. */
+        branch?: string
+        /** @description The commit message to associate the full-scan with. */
+        commit_message?: string
+        /** @description The commit hash to associate the full-scan with. */
+        commit_hash?: string
+        /** @description The pull request number to associate the full-scan with. */
+        pull_request?: number
+        /** @description The committers to associate with the full-scan. Set query more than once to set multiple. */
+        committers?: string
+        /** @description The integration type to associate the full-scan with. Defaults to "Api" if omitted. */
+        integration_type?:
+          | 'api'
+          | 'github'
+          | 'gitlab'
+          | 'bitbucket'
+          | 'azure'
+          | 'web'
+        /** @description The integration org slug to associate the full-scan with. If omitted, the Socket org name will be used. This is used to generate links and badges. */
+        integration_org_slug?: string
+        /** @description Set the default branch of the repository to the branch of this full-scan. A branch name is required with this option. */
+        make_default_branch?: boolean
+        /** @description Designate this full-scan as the latest scan of a given branch. Default branch head scans are included in org alerts. This is only supported on the default branch. A branch name is required with this option. */
+        set_as_pending_head?: boolean
+        /** @description Create a temporary full-scan that is not listed in the reports dashboard. Cannot be used when set_as_pending_head=true. */
+        tmp?: boolean
+        /** @description The type of scan to perform. Defaults to 'socket'. Must be 32 characters or less. Used for categorizing multiple SBOM heads per repository branch. */
+        scan_type?: string
+      }
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+      }
+    }
+    requestBody?: {
+      content: {
+        'multipart/form-data': {
+          [key: string]: never
+        }
+      }
+    }
+    responses: {
+      /** @description The details of the created full scan. */
+      201: {
+        content: {
+          'application/json': {
+            /** @default */
+            id?: string
+            /** @default */
+            created_at?: string
+            /** @default */
+            updated_at?: string
+            /** @default */
+            organization_id?: string
+            /** @default */
+            organization_slug?: string
+            /** @default */
+            repository_id?: string
+            /** @default */
+            repository_slug?: string
+            /** @default */
+            branch?: string | null
+            /** @default */
+            commit_message?: string | null
+            /** @default */
+            commit_hash?: string | null
+            /** @default 0 */
+            pull_request?: number | null
+            committers?: string[]
+            /** @default */
+            html_url?: string | null
+            /** @default */
+            api_url?: string | null
+            /** @default */
+            workspace?: string
+            /** @default */
+            repo?: string
+            /** @default */
+            html_report_url?: string
+            /** @default */
+            integration_type?: string | null
+            /** @default */
+            integration_repo_url?: string
+            /** @default */
+            integration_branch_url?: string | null
+            /** @default */
+            integration_commit_url?: string | null
+            /** @default */
+            integration_pull_request_url?: string | null
+            /**
+             * @description The current processing status of the SBOM
+             * @default pending
+             * @enum {string|null}
+             */
+            scan_state?: 'pending' | 'precrawl' | 'resolve' | 'scan' | null
+            unmatchedFiles?: string[]
+          }
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
   /**
    * Export CycloneDX SBOM (Beta)
    * @description Export a Socket SBOM as a CycloneDX SBOM
@@ -6022,7 +6342,13 @@ export interface operations {
         /** @description The committers to associate the new full-scan with. Set query more than once to set multiple committers. */
         committers?: string
         /** @description The integration type to associate the new full-scan with. Defaults to "api" if omitted. */
-        integration_type?: 'api' | 'github' | 'gitlab' | 'bitbucket' | 'azure'
+        integration_type?:
+          | 'api'
+          | 'github'
+          | 'gitlab'
+          | 'bitbucket'
+          | 'azure'
+          | 'web'
         /** @description The integration org slug to associate the new full-scan with. If omitted, the Socket org name will be used. This is used to generate links and badges. */
         integration_org_slug?: string
         /** @description Set to true when running a diff between a merged commit and its parent commit in the same branch. Set to false when running diffs in an open PR between unmerged commits. */
@@ -12525,34 +12851,6 @@ export interface operations {
         per_page?: number
         /** @description The pagination cursor that was returned as the "endCursor" property in previous request */
         startAfterCursor?: string
-        /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be included */
-        'filters.alertSeverity'?: string
-        /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be excluded */
-        'filters.alertSeverity.notIn'?: string
-        /** @description Comma-separated list of repo slugs that should be included */
-        'filters.repoSlug'?: string
-        /** @description Comma-separated list of repo slugs that should be excluded */
-        'filters.repoSlug.notIn'?: string
-        /** @description Comma-separated list of repo full names that should be included */
-        'filters.repoFullName'?: string
-        /** @description Comma-separated list of repo full names that should be excluded */
-        'filters.repoFullName.notIn'?: string
-        /** @description Comma-separated list of repo labels that should be included. Use "" to filter for repositories with no labels. */
-        'filters.repoLabels'?: string
-        /** @description Comma-separated list of repo labels that should be excluded. Use "" to filter for repositories with no labels. */
-        'filters.repoLabels.notIn'?: string
-        /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be included */
-        'filters.alertType'?: string
-        /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be excluded */
-        'filters.alertType.notIn'?: string
-        /** @description Name of artifact */
-        'filters.artifactName'?: string
-        /** @description Name of artifact */
-        'filters.artifactName.notIn'?: string
-        /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be included */
-        'filters.artifactType'?: string
-        /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be excluded */
-        'filters.artifactType.notIn'?: string
         /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be included */
         'filters.alertAction'?: string
         /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be excluded */
@@ -12561,10 +12859,6 @@ export interface operations {
         'filters.alertActionSourceType'?: string
         /** @description Comma-separated list of alert action source types ("fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be excluded */
         'filters.alertActionSourceType.notIn'?: string
-        /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be included */
-        'filters.alertFixType'?: string
-        /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be excluded */
-        'filters.alertFixType.notIn'?: string
         /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be included */
         'filters.alertCategory'?: string
         /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be excluded */
@@ -12585,38 +12879,70 @@ export interface operations {
         'filters.alertCweName'?: string
         /** @description CWE name */
         'filters.alertCweName.notIn'?: string
-        /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be included */
-        'filters.alertReachabilityType'?: string
-        /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be excluded */
-        'filters.alertReachabilityType.notIn'?: string
-        /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be included */
-        'filters.alertReachabilityAnalysisType'?: string
-        /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be excluded */
-        'filters.alertReachabilityAnalysisType.notIn'?: string
-        /** @description Alert priority ("low", "medium", "high", or "critical") */
-        'filters.alertPriority'?: string
-        /** @description Alert priority ("low", "medium", "high", or "critical") */
-        'filters.alertPriority.notIn'?: string
-        /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
-        'filters.alertKEV'?: boolean
-        /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
-        'filters.alertKEV.notIn'?: boolean
         /** @description Alert EPSS ("low", "medium", "high", "critical") */
         'filters.alertEPSS'?: string
         /** @description Alert EPSS ("low", "medium", "high", "critical") */
         'filters.alertEPSS.notIn'?: string
-        /** @description Direct/transitive dependency filter flag */
-        'filters.dependencyDirect'?: boolean
-        /** @description Direct/transitive dependency filter flag */
-        'filters.dependencyDirect.notIn'?: boolean
-        /** @description Development/production dependency filter flag */
-        'filters.dependencyDev'?: boolean
-        /** @description Development/production dependency filter flag */
-        'filters.dependencyDev.notIn'?: boolean
+        /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be included */
+        'filters.alertFixType'?: string
+        /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be excluded */
+        'filters.alertFixType.notIn'?: string
+        /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
+        'filters.alertKEV'?: boolean
+        /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
+        'filters.alertKEV.notIn'?: boolean
+        /** @description Alert priority ("low", "medium", "high", or "critical") */
+        'filters.alertPriority'?: string
+        /** @description Alert priority ("low", "medium", "high", or "critical") */
+        'filters.alertPriority.notIn'?: string
+        /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be included */
+        'filters.alertReachabilityAnalysisType'?: string
+        /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be excluded */
+        'filters.alertReachabilityAnalysisType.notIn'?: string
+        /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be included */
+        'filters.alertReachabilityType'?: string
+        /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be excluded */
+        'filters.alertReachabilityType.notIn'?: string
+        /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be included */
+        'filters.alertSeverity'?: string
+        /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be excluded */
+        'filters.alertSeverity.notIn'?: string
+        /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be included */
+        'filters.alertType'?: string
+        /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be excluded */
+        'filters.alertType.notIn'?: string
+        /** @description Name of artifact */
+        'filters.artifactName'?: string
+        /** @description Name of artifact */
+        'filters.artifactName.notIn'?: string
+        /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be included */
+        'filters.artifactType'?: string
+        /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be excluded */
+        'filters.artifactType.notIn'?: string
         /** @description Dead/reachable dependency filter flag */
         'filters.dependencyDead'?: boolean
         /** @description Dead/reachable dependency filter flag */
         'filters.dependencyDead.notIn'?: boolean
+        /** @description Development/production dependency filter flag */
+        'filters.dependencyDev'?: boolean
+        /** @description Development/production dependency filter flag */
+        'filters.dependencyDev.notIn'?: boolean
+        /** @description Direct/transitive dependency filter flag */
+        'filters.dependencyDirect'?: boolean
+        /** @description Direct/transitive dependency filter flag */
+        'filters.dependencyDirect.notIn'?: boolean
+        /** @description Comma-separated list of repo full names that should be included */
+        'filters.repoFullName'?: string
+        /** @description Comma-separated list of repo full names that should be excluded */
+        'filters.repoFullName.notIn'?: string
+        /** @description Comma-separated list of repo labels that should be included. Use "" to filter for repositories with no labels. */
+        'filters.repoLabels'?: string
+        /** @description Comma-separated list of repo labels that should be excluded. Use "" to filter for repositories with no labels. */
+        'filters.repoLabels.notIn'?: string
+        /** @description Comma-separated list of repo slugs that should be included */
+        'filters.repoSlug'?: string
+        /** @description Comma-separated list of repo slugs that should be excluded */
+        'filters.repoSlug.notIn'?: string
       }
       path: {
         /** @description The slug of the organization */
@@ -12726,52 +13052,90 @@ export interface operations {
               /** @default false */
               includeLatestAlertsOnly: boolean
               filters: {
-                /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be excluded */
-                alertSeverity?: string[]
-                /** @description Comma-separated list of repo slugs that should be excluded */
-                repoSlug?: string[]
-                /** @description Comma-separated list of repo full names that should be excluded */
-                repoFullName?: string[]
-                /** @description Comma-separated list of repo labels that should be excluded. Use "" to filter for repositories with no labels. */
-                repoLabels?: string[]
-                /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be excluded */
-                alertType?: string[]
-                /** @description Name of artifact */
-                artifactName?: string[]
-                /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be excluded */
-                artifactType?: string[]
-                /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be excluded */
+                /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be included */
                 alertAction?: string[]
-                /** @description Comma-separated list of alert action source types ("fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be excluded */
+                /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be excluded */
+                'alertAction.notIn'?: string[]
+                /** @description Comma-separated list of alert action source types ("fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be included */
                 alertActionSourceType?: string[]
-                /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be excluded */
-                alertFixType?: string[]
-                /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be excluded */
+                /** @description Comma-separated list of alert action source types ("fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be excluded */
+                'alertActionSourceType.notIn'?: string[]
+                /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be included */
                 alertCategory?: string[]
+                /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be excluded */
+                'alertCategory.notIn'?: string[]
                 /** @description CVE ID */
                 alertCveId?: string[]
+                /** @description CVE ID */
+                'alertCveId.notIn'?: string[]
                 /** @description CVE title */
                 alertCveTitle?: string[]
+                /** @description CVE title */
+                'alertCveTitle.notIn'?: string[]
                 /** @description CWE ID */
                 alertCweId?: string[]
+                /** @description CWE ID */
+                'alertCweId.notIn'?: string[]
                 /** @description CWE name */
                 alertCweName?: string[]
-                /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be excluded */
-                alertReachabilityType?: string[]
-                /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be excluded */
-                alertReachabilityAnalysisType?: string[]
-                /** @description Alert priority ("low", "medium", "high", or "critical") */
-                alertPriority?: string[]
-                /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
-                alertKEV?: boolean[]
+                /** @description CWE name */
+                'alertCweName.notIn'?: string[]
                 /** @description Alert EPSS ("low", "medium", "high", "critical") */
                 alertEPSS?: string[]
-                /** @description Direct/transitive dependency filter flag */
-                dependencyDirect?: boolean[]
-                /** @description Development/production dependency filter flag */
-                dependencyDev?: boolean[]
+                /** @description Alert EPSS ("low", "medium", "high", "critical") */
+                'alertEPSS.notIn'?: string[]
+                /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be included */
+                alertFixType?: string[]
+                /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be excluded */
+                'alertFixType.notIn'?: string[]
+                /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
+                alertKEV?: boolean[]
+                /** @description Alert priority ("low", "medium", "high", or "critical") */
+                alertPriority?: string[]
+                /** @description Alert priority ("low", "medium", "high", or "critical") */
+                'alertPriority.notIn'?: string[]
+                /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be included */
+                alertReachabilityAnalysisType?: string[]
+                /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be excluded */
+                'alertReachabilityAnalysisType.notIn'?: string[]
+                /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be included */
+                alertReachabilityType?: string[]
+                /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be excluded */
+                'alertReachabilityType.notIn'?: string[]
+                /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be included */
+                alertSeverity?: string[]
+                /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be excluded */
+                'alertSeverity.notIn'?: string[]
+                /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be included */
+                alertType?: string[]
+                /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be excluded */
+                'alertType.notIn'?: string[]
+                /** @description Name of artifact */
+                artifactName?: string[]
+                /** @description Name of artifact */
+                'artifactName.notIn'?: string[]
+                /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be included */
+                artifactType?: string[]
+                /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be excluded */
+                'artifactType.notIn'?: string[]
                 /** @description Dead/reachable dependency filter flag */
                 dependencyDead?: boolean[]
+                /** @description Development/production dependency filter flag */
+                dependencyDev?: boolean[]
+                /** @description Direct/transitive dependency filter flag */
+                dependencyDirect?: boolean[]
+                /** @description Comma-separated list of repo full names that should be included */
+                repoFullName?: string[]
+                /** @description Comma-separated list of repo full names that should be excluded */
+                'repoFullName.notIn'?: string[]
+                /** @description Comma-separated list of repo labels that should be included. Use "" to filter for repositories with no labels. */
+                repoLabels?: string[]
+                /** @description Comma-separated list of repo labels that should be excluded. Use "" to filter for repositories with no labels. */
+                'repoLabels.notIn'?: string[]
+                /** @description Comma-separated list of repo slugs that should be included */
+                repoSlug?: string[]
+                /** @description Comma-separated list of repo slugs that should be excluded */
+                'repoSlug.notIn'?: string[]
               }
             }
           }
@@ -12801,34 +13165,6 @@ export interface operations {
         range?: string
         /** @description Comma-separated list of fields that should be used for count aggregation (allowed: alertSeverity,repoSlug,repoFullName,repoLabels,alertType,artifactType,alertAction,alertActionSourceType,alertFixType,alertCategory,alertCveId,alertCveTitle,alertCweId,alertCweName,alertReachabilityType,alertReachabilityAnalysisType,alertPriority,alertKEV,alertEPSS,dependencyDirect,dependencyDev,dependencyDead) */
         'aggregation.fields'?: string
-        /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be included */
-        'filters.alertSeverity'?: string
-        /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be excluded */
-        'filters.alertSeverity.notIn'?: string
-        /** @description Comma-separated list of repo slugs that should be included */
-        'filters.repoSlug'?: string
-        /** @description Comma-separated list of repo slugs that should be excluded */
-        'filters.repoSlug.notIn'?: string
-        /** @description Comma-separated list of repo full names that should be included */
-        'filters.repoFullName'?: string
-        /** @description Comma-separated list of repo full names that should be excluded */
-        'filters.repoFullName.notIn'?: string
-        /** @description Comma-separated list of repo labels that should be included. Use "" to filter for repositories with no labels. */
-        'filters.repoLabels'?: string
-        /** @description Comma-separated list of repo labels that should be excluded. Use "" to filter for repositories with no labels. */
-        'filters.repoLabels.notIn'?: string
-        /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be included */
-        'filters.alertType'?: string
-        /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be excluded */
-        'filters.alertType.notIn'?: string
-        /** @description Name of artifact */
-        'filters.artifactName'?: string
-        /** @description Name of artifact */
-        'filters.artifactName.notIn'?: string
-        /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be included */
-        'filters.artifactType'?: string
-        /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be excluded */
-        'filters.artifactType.notIn'?: string
         /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be included */
         'filters.alertAction'?: string
         /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be excluded */
@@ -12837,10 +13173,6 @@ export interface operations {
         'filters.alertActionSourceType'?: string
         /** @description Comma-separated list of alert action source types ("fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be excluded */
         'filters.alertActionSourceType.notIn'?: string
-        /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be included */
-        'filters.alertFixType'?: string
-        /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be excluded */
-        'filters.alertFixType.notIn'?: string
         /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be included */
         'filters.alertCategory'?: string
         /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be excluded */
@@ -12861,43 +13193,75 @@ export interface operations {
         'filters.alertCweName'?: string
         /** @description CWE name */
         'filters.alertCweName.notIn'?: string
-        /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be included */
-        'filters.alertReachabilityType'?: string
-        /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be excluded */
-        'filters.alertReachabilityType.notIn'?: string
-        /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be included */
-        'filters.alertReachabilityAnalysisType'?: string
-        /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be excluded */
-        'filters.alertReachabilityAnalysisType.notIn'?: string
-        /** @description Alert priority ("low", "medium", "high", or "critical") */
-        'filters.alertPriority'?: string
-        /** @description Alert priority ("low", "medium", "high", or "critical") */
-        'filters.alertPriority.notIn'?: string
-        /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
-        'filters.alertKEV'?: boolean
-        /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
-        'filters.alertKEV.notIn'?: boolean
         /** @description Alert EPSS ("low", "medium", "high", "critical") */
         'filters.alertEPSS'?: string
         /** @description Alert EPSS ("low", "medium", "high", "critical") */
         'filters.alertEPSS.notIn'?: string
-        /** @description Direct/transitive dependency filter flag */
-        'filters.dependencyDirect'?: boolean
-        /** @description Direct/transitive dependency filter flag */
-        'filters.dependencyDirect.notIn'?: boolean
-        /** @description Development/production dependency filter flag */
-        'filters.dependencyDev'?: boolean
-        /** @description Development/production dependency filter flag */
-        'filters.dependencyDev.notIn'?: boolean
+        /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be included */
+        'filters.alertFixType'?: string
+        /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be excluded */
+        'filters.alertFixType.notIn'?: string
+        /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
+        'filters.alertKEV'?: boolean
+        /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
+        'filters.alertKEV.notIn'?: boolean
+        /** @description Alert priority ("low", "medium", "high", or "critical") */
+        'filters.alertPriority'?: string
+        /** @description Alert priority ("low", "medium", "high", or "critical") */
+        'filters.alertPriority.notIn'?: string
+        /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be included */
+        'filters.alertReachabilityAnalysisType'?: string
+        /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be excluded */
+        'filters.alertReachabilityAnalysisType.notIn'?: string
+        /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be included */
+        'filters.alertReachabilityType'?: string
+        /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be excluded */
+        'filters.alertReachabilityType.notIn'?: string
+        /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be included */
+        'filters.alertSeverity'?: string
+        /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be excluded */
+        'filters.alertSeverity.notIn'?: string
+        /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be included */
+        'filters.alertType'?: string
+        /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be excluded */
+        'filters.alertType.notIn'?: string
+        /** @description Name of artifact */
+        'filters.artifactName'?: string
+        /** @description Name of artifact */
+        'filters.artifactName.notIn'?: string
+        /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be included */
+        'filters.artifactType'?: string
+        /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be excluded */
+        'filters.artifactType.notIn'?: string
         /** @description Dead/reachable dependency filter flag */
         'filters.dependencyDead'?: boolean
         /** @description Dead/reachable dependency filter flag */
         'filters.dependencyDead.notIn'?: boolean
-      }
-      path: {
-        /** @description The slug of the organization */
-        org_slug: string
-      }
+        /** @description Development/production dependency filter flag */
+        'filters.dependencyDev'?: boolean
+        /** @description Development/production dependency filter flag */
+        'filters.dependencyDev.notIn'?: boolean
+        /** @description Direct/transitive dependency filter flag */
+        'filters.dependencyDirect'?: boolean
+        /** @description Direct/transitive dependency filter flag */
+        'filters.dependencyDirect.notIn'?: boolean
+        /** @description Comma-separated list of repo full names that should be included */
+        'filters.repoFullName'?: string
+        /** @description Comma-separated list of repo full names that should be excluded */
+        'filters.repoFullName.notIn'?: string
+        /** @description Comma-separated list of repo labels that should be included. Use "" to filter for repositories with no labels. */
+        'filters.repoLabels'?: string
+        /** @description Comma-separated list of repo labels that should be excluded. Use "" to filter for repositories with no labels. */
+        'filters.repoLabels.notIn'?: string
+        /** @description Comma-separated list of repo slugs that should be included */
+        'filters.repoSlug'?: string
+        /** @description Comma-separated list of repo slugs that should be excluded */
+        'filters.repoSlug.notIn'?: string
+      }
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+      }
     }
     responses: {
       /** @description The trend data */
@@ -12918,52 +13282,90 @@ export interface operations {
                 groups: string[][]
               }
               filters: {
-                /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be excluded */
-                alertSeverity?: string[]
-                /** @description Comma-separated list of repo slugs that should be excluded */
-                repoSlug?: string[]
-                /** @description Comma-separated list of repo full names that should be excluded */
-                repoFullName?: string[]
-                /** @description Comma-separated list of repo labels that should be excluded. Use "" to filter for repositories with no labels. */
-                repoLabels?: string[]
-                /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be excluded */
-                alertType?: string[]
-                /** @description Name of artifact */
-                artifactName?: string[]
-                /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be excluded */
-                artifactType?: string[]
-                /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be excluded */
+                /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be included */
                 alertAction?: string[]
-                /** @description Comma-separated list of alert action source types ("fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be excluded */
+                /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be excluded */
+                'alertAction.notIn'?: string[]
+                /** @description Comma-separated list of alert action source types ("fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be included */
                 alertActionSourceType?: string[]
-                /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be excluded */
-                alertFixType?: string[]
-                /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be excluded */
+                /** @description Comma-separated list of alert action source types ("fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be excluded */
+                'alertActionSourceType.notIn'?: string[]
+                /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be included */
                 alertCategory?: string[]
+                /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be excluded */
+                'alertCategory.notIn'?: string[]
                 /** @description CVE ID */
                 alertCveId?: string[]
+                /** @description CVE ID */
+                'alertCveId.notIn'?: string[]
                 /** @description CVE title */
                 alertCveTitle?: string[]
+                /** @description CVE title */
+                'alertCveTitle.notIn'?: string[]
                 /** @description CWE ID */
                 alertCweId?: string[]
+                /** @description CWE ID */
+                'alertCweId.notIn'?: string[]
                 /** @description CWE name */
                 alertCweName?: string[]
-                /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be excluded */
-                alertReachabilityType?: string[]
-                /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be excluded */
-                alertReachabilityAnalysisType?: string[]
-                /** @description Alert priority ("low", "medium", "high", or "critical") */
-                alertPriority?: string[]
-                /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
-                alertKEV?: boolean[]
+                /** @description CWE name */
+                'alertCweName.notIn'?: string[]
                 /** @description Alert EPSS ("low", "medium", "high", "critical") */
                 alertEPSS?: string[]
-                /** @description Direct/transitive dependency filter flag */
-                dependencyDirect?: boolean[]
-                /** @description Development/production dependency filter flag */
-                dependencyDev?: boolean[]
+                /** @description Alert EPSS ("low", "medium", "high", "critical") */
+                'alertEPSS.notIn'?: string[]
+                /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be included */
+                alertFixType?: string[]
+                /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be excluded */
+                'alertFixType.notIn'?: string[]
+                /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
+                alertKEV?: boolean[]
+                /** @description Alert priority ("low", "medium", "high", or "critical") */
+                alertPriority?: string[]
+                /** @description Alert priority ("low", "medium", "high", or "critical") */
+                'alertPriority.notIn'?: string[]
+                /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be included */
+                alertReachabilityAnalysisType?: string[]
+                /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be excluded */
+                'alertReachabilityAnalysisType.notIn'?: string[]
+                /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be included */
+                alertReachabilityType?: string[]
+                /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be excluded */
+                'alertReachabilityType.notIn'?: string[]
+                /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be included */
+                alertSeverity?: string[]
+                /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be excluded */
+                'alertSeverity.notIn'?: string[]
+                /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be included */
+                alertType?: string[]
+                /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be excluded */
+                'alertType.notIn'?: string[]
+                /** @description Name of artifact */
+                artifactName?: string[]
+                /** @description Name of artifact */
+                'artifactName.notIn'?: string[]
+                /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be included */
+                artifactType?: string[]
+                /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be excluded */
+                'artifactType.notIn'?: string[]
                 /** @description Dead/reachable dependency filter flag */
                 dependencyDead?: boolean[]
+                /** @description Development/production dependency filter flag */
+                dependencyDev?: boolean[]
+                /** @description Direct/transitive dependency filter flag */
+                dependencyDirect?: boolean[]
+                /** @description Comma-separated list of repo full names that should be included */
+                repoFullName?: string[]
+                /** @description Comma-separated list of repo full names that should be excluded */
+                'repoFullName.notIn'?: string[]
+                /** @description Comma-separated list of repo labels that should be included. Use "" to filter for repositories with no labels. */
+                repoLabels?: string[]
+                /** @description Comma-separated list of repo labels that should be excluded. Use "" to filter for repositories with no labels. */
+                'repoLabels.notIn'?: string[]
+                /** @description Comma-separated list of repo slugs that should be included */
+                repoSlug?: string[]
+                /** @description Comma-separated list of repo slugs that should be excluded */
+                'repoSlug.notIn'?: string[]
               }
             }
             items: Array<{
@@ -13337,6 +13739,9 @@ export interface operations {
           | 'DisassociateLabel'
           | 'DowngradeOrganizationPlan'
           | 'JoinOrganization'
+          | 'MemberAdded'
+          | 'MemberRemoved'
+          | 'MemberRoleChanged'
           | 'RemoveLicenseOverlay'
           | 'RemoveMember'
           | 'ResetInvitationLink'
@@ -13451,21 +13856,39 @@ export interface operations {
         content: {
           'application/json': {
             tokens: Array<{
+              /** @description List of committers associated with this API Token */
               committers: {
-                /** @default */
+                /**
+                 * @description Email address of the committer
+                 * @default
+                 */
                 email?: string
                 /**
+                 * @description The source control provider for the committer
                  * @default api
                  * @enum {string}
                  */
                 provider?: 'api' | 'azure' | 'bitbucket' | 'github' | 'gitlab'
-                /** @default */
+                /**
+                 * @description Login name on the provider platform
+                 * @default
+                 */
                 providerLoginName?: string
-                /** @default */
+                /**
+                 * @description User ID on the provider platform
+                 * @default
+                 */
                 providerUserId?: string
               }[]
+              /**
+               * Format: uuid
+               * @description ID of the Socket user who created the API Token
+               * @default
+               */
+              created_by: string | null
               /**
                * Format: date
+               * @description Timestamp when the API Token was created
                * @default
                */
               created_at: string
@@ -13476,16 +13899,21 @@ export interface operations {
               id: string
               /**
                * Format: date
+               * @description Timestamp when the API Token was last used
                * @default
                */
               last_used_at: string
-              /** @default 1000 */
+              /**
+               * @description Maximum number of API calls allowed per month
+               * @default 1000
+               */
               max_quota: number
               /**
                * @description Name for the API Token
                * @default api token
                */
               name: string | null
+              /** @description List of scopes granted to the API Token */
               scopes: (
                 | 'alerts'
                 | 'alerts:list'
@@ -13501,6 +13929,8 @@ export interface operations {
                 | 'dependencies'
                 | 'dependencies:list'
                 | 'dependencies:trend'
+                | 'fixes'
+                | 'fixes:list'
                 | 'full-scans'
                 | 'full-scans:list'
                 | 'full-scans:create'
@@ -13547,11 +13977,18 @@ export interface operations {
                 | 'security-policy:read'
                 | 'socket-basics'
                 | 'socket-basics:read'
+                | 'telemetry-policy'
+                | 'telemetry-policy:update'
                 | 'threat-feed'
                 | 'threat-feed:list'
                 | 'triage'
                 | 'triage:alerts-list'
                 | 'triage:alerts-update'
+                | 'webhooks'
+                | 'webhooks:create'
+                | 'webhooks:list'
+                | 'webhooks:update'
+                | 'webhooks:delete'
               )[]
               /**
                * @description The obfuscated token of the API Token
@@ -13595,8 +14032,12 @@ export interface operations {
     requestBody?: {
       content: {
         'application/json': {
-          /** @default 1000 */
+          /**
+           * @description Maximum number of API calls allowed per month
+           * @default 1000
+           */
           max_quota: number
+          /** @description List of scopes granted to the API Token */
           scopes: Array<
             | 'alerts'
             | 'alerts:list'
@@ -13612,6 +14053,8 @@ export interface operations {
             | 'dependencies'
             | 'dependencies:list'
             | 'dependencies:trend'
+            | 'fixes'
+            | 'fixes:list'
             | 'full-scans'
             | 'full-scans:list'
             | 'full-scans:create'
@@ -13658,11 +14101,18 @@ export interface operations {
             | 'security-policy:read'
             | 'socket-basics'
             | 'socket-basics:read'
+            | 'telemetry-policy'
+            | 'telemetry-policy:update'
             | 'threat-feed'
             | 'threat-feed:list'
             | 'triage'
             | 'triage:alerts-list'
             | 'triage:alerts-update'
+            | 'webhooks'
+            | 'webhooks:create'
+            | 'webhooks:list'
+            | 'webhooks:update'
+            | 'webhooks:delete'
           >
           /**
            * @description The visibility of the API Token. Warning: this field is deprecated and will be removed in the future.
@@ -13670,17 +14120,28 @@ export interface operations {
            * @enum {string}
            */
           visibility: 'admin' | 'organization'
+          /** @description Committer information to associate with the API Token */
           committer: {
-            /** @default */
+            /**
+             * @description Email address of the committer
+             * @default
+             */
             email?: string
             /**
+             * @description The source control provider for the committer
              * @default api
              * @enum {string}
              */
             provider?: 'api' | 'azure' | 'bitbucket' | 'github' | 'gitlab'
-            /** @default */
+            /**
+             * @description Login name on the provider platform
+             * @default
+             */
             providerLoginName?: string
-            /** @default */
+            /**
+             * @description User ID on the provider platform
+             * @default
+             */
             providerUserId?: string
           }
           /**
@@ -13688,6 +14149,24 @@ export interface operations {
            * @default api token
            */
           name?: string
+          /** @description List of resources this API Token can access. Tokens with resource grants can only access a subset of routes that support this feature. */
+          resources?: Array<{
+            /**
+             * @description Slug of the organization to grant access to
+             * @default
+             */
+            organizationSlug: string
+            /**
+             * @description Slug of the repository to grant access to
+             * @default
+             */
+            repositorySlug: string
+            /**
+             * @description Workspace slug containing the specified repo
+             * @default
+             */
+            workspace?: string
+          }>
         }
       }
     }
@@ -13696,6 +14175,12 @@ export interface operations {
       200: {
         content: {
           'application/json': {
+            /**
+             * Format: uuid
+             * @description ID of the Socket user who created the API Token, if available
+             * @default
+             */
+            created_by: string | null
             /** @default */
             token: string
           }
@@ -13726,8 +14211,12 @@ export interface operations {
     requestBody?: {
       content: {
         'application/json': {
-          /** @default 1000 */
+          /**
+           * @description Maximum number of API calls allowed per hour
+           * @default 1000
+           */
           max_quota: number
+          /** @description List of scopes granted to the API Token */
           scopes: Array<
             | 'alerts'
             | 'alerts:list'
@@ -13743,6 +14232,8 @@ export interface operations {
             | 'dependencies'
             | 'dependencies:list'
             | 'dependencies:trend'
+            | 'fixes'
+            | 'fixes:list'
             | 'full-scans'
             | 'full-scans:list'
             | 'full-scans:create'
@@ -13789,13 +14280,23 @@ export interface operations {
             | 'security-policy:read'
             | 'socket-basics'
             | 'socket-basics:read'
+            | 'telemetry-policy'
+            | 'telemetry-policy:update'
             | 'threat-feed'
             | 'threat-feed:list'
             | 'triage'
             | 'triage:alerts-list'
             | 'triage:alerts-update'
+            | 'webhooks'
+            | 'webhooks:create'
+            | 'webhooks:list'
+            | 'webhooks:update'
+            | 'webhooks:delete'
           >
-          /** @default */
+          /**
+           * @description The API token to update
+           * @default
+           */
           token: string
           /**
            * @description The visibility of the API Token. Warning: this field is deprecated and will be removed in the future.
@@ -13803,17 +14304,28 @@ export interface operations {
            * @enum {string}
            */
           visibility: 'admin' | 'organization'
+          /** @description Committer information to associate with the API Token */
           committer: {
-            /** @default */
+            /**
+             * @description Email address of the committer
+             * @default
+             */
             email?: string
             /**
+             * @description The source control provider for the committer
              * @default api
              * @enum {string}
              */
             provider?: 'api' | 'azure' | 'bitbucket' | 'github' | 'gitlab'
-            /** @default */
+            /**
+             * @description Login name on the provider platform
+             * @default
+             */
             providerLoginName?: string
-            /** @default */
+            /**
+             * @description User ID on the provider platform
+             * @default
+             */
             providerUserId?: string
           }
           /**
@@ -13869,6 +14381,12 @@ export interface operations {
       200: {
         content: {
           'application/json': {
+            /**
+             * Format: uuid
+             * @description ID of the Socket user who initiated the rotation, if available
+             * @default
+             */
+            created_by: string | null
             /** @default */
             token: string
           }
@@ -14012,6 +14530,7 @@ export interface operations {
         ecosystem?:
           | 'github'
           | 'cargo'
+          | 'composer'
           | 'chrome'
           | 'golang'
           | 'huggingface'
@@ -14052,6 +14571,11 @@ export interface operations {
                * @default false
                */
               needsHumanReview?: boolean
+              /**
+               * @description Unique threat instance identifier across artifacts
+               * @default 0
+               */
+              threatInstanceId?: number
             }>
             /** @default */
             nextPage: string | null
@@ -14066,65 +14590,1161 @@ export interface operations {
     }
   }
   /**
-   * Get Threat Feed Items (Beta)
-   * @description Paginated list of threats, sorted by updated_at by default. Set updated_after to the unix timestamp of your last sync while sorting by updated_at to synchronize all new or updated threats in the feed.
-   *
-   * This endpoint requires an Enterprise Plan with Threat Feed add-on. [Contact](https://socket.dev/demo?utm_source=api-docs&utm_medium=referral&utm_campaign=tracking) our sales team for more details.
+   * Get Threat Feed Items (Beta)
+   * @description Paginated list of threats, sorted by updated_at by default. Set updated_after to the unix timestamp of your last sync while sorting by updated_at to synchronize all new or updated threats in the feed.
+   *
+   * This endpoint requires an Enterprise Plan with Threat Feed add-on. [Contact](https://socket.dev/demo?utm_source=api-docs&utm_medium=referral&utm_campaign=tracking) our sales team for more details.
+   *
+   * This endpoint consumes 1 unit of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - threat-feed:list
+   */
+  getOrgThreatFeedItems: {
+    parameters: {
+      query?: {
+        /** @description Number of threats per page */
+        per_page?: number
+        /** @description Page cursor token. Pass the returned nextPageCursor to this query string to fetch the next page of the threat feed. */
+        page_cursor?: string
+        /** @description Set the sort order for the threat feed items. Default is descending order by updated_at, which includes all new and updated threat feed items. */
+        sort?: 'id' | 'created_at' | 'updated_at'
+        /** @description A Unix timestamp in seconds that filters results to items only updated after the timestamp. */
+        updated_after?: string
+        /** @description A Unix timestamp in seconds that filters results to items only created after the date. */
+        created_after?: string
+        /** @description Order direction of the provided sort field. */
+        direction?: 'desc' | 'asc'
+        /** @description Filter what type of threats to return */
+        filter?:
+          | 'u'
+          | 'c'
+          | 'fp'
+          | 'tp'
+          | 'mal'
+          | 'vuln'
+          | 'anom'
+          | 'joke'
+          | 'spy'
+          | 'typo'
+          | 'secret'
+          | 'obf'
+          | 'dual'
+        /** @description Filter threats by package name */
+        name?: string
+        /** @description Filter threats by package version. */
+        version?: string
+        /** @description Only return threats which have been human-reviewed */
+        is_human_reviewed?: boolean
+        /** @description Filter threats by package ecosystem type */
+        ecosystem?:
+          | 'github'
+          | 'cargo'
+          | 'composer'
+          | 'chrome'
+          | 'golang'
+          | 'huggingface'
+          | 'maven'
+          | 'npm'
+          | 'nuget'
+          | 'vscode'
+          | 'pypi'
+          | 'gem'
+      }
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+      }
+    }
+    responses: {
+      /** @description The paginated list of items in the threat feed and the next page cursor. */
+      200: {
+        content: {
+          'application/json': {
+            results: Array<{
+              /** @default */
+              createdAt?: string
+              /** @default */
+              updatedAt?: string
+              /** @default */
+              description?: string
+              /** @default 0 */
+              id?: number
+              /** @default */
+              locationHtmlUrl?: string
+              /** @default */
+              packageHtmlUrl?: string
+              /** @default */
+              purl?: string
+              /** @default */
+              removedAt?: string | null
+              /** @default */
+              threatType?: string
+              /**
+               * @description Whether the threat still is in need of human review by the threat research team
+               * @default false
+               */
+              needsHumanReview?: boolean
+              /**
+               * @description Unique threat instance identifier across artifacts
+               * @default 0
+               */
+              threatInstanceId?: number
+            }>
+            /** @default */
+            nextPageCursor: string | null
+          }
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
+  /**
+   * Fetch fixes for vulnerabilities in a repository or scan
+   * @description Fetches available fixes for vulnerabilities in a repository or scan.
+   * Requires either repo_slug or full_scan_id as well as vulnerability_ids to be provided.
+   * vulnerability_ids can be a comma-separated list of GHSA or CVE IDs, or "*" for all vulnerabilities.
+   *
+   * This endpoint consumes 10 units of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - fixes:list
+   */
+  'fetch-fixes': {
+    parameters: {
+      query: {
+        /** @description The slug of the repository to fetch fixes for. Computes fixes based on the latest scan on the default branch */
+        repo_slug?: string
+        /** @description The ID of the scan to fetch fixes for */
+        full_scan_id?: string
+        /** @description Comma-separated list of GHSA or CVE IDs, or "*" for all vulnerabilities */
+        vulnerability_ids: string
+        /** @description Whether to allow major version updates in fixes */
+        allow_major_updates: boolean
+        /** @description Minimum release age for fixes packages (e.g., "1h", "2d", "1w"). Higher values reduces risk of installing recently released untested package versions. */
+        minimum_release_age?: string
+        /** @description Whether to include advisory details in the response */
+        include_details?: boolean
+        /** @description Set to include the direct dependencies responsible for introducing the dependency or dependencies with the vulnerability in the response */
+        include_responsible_direct_dependencies?: boolean
+      }
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+      }
+    }
+    responses: {
+      /** @description Fix details for requested vulnerabilities */
+      200: {
+        content: {
+          'application/json': {
+            /** @description Map of vulnerability IDs (GHSA or CVE) to their fix details. Each entry contains information about available fixes, partial fixes, or reasons why fixes are not available. */
+            fixDetails: {
+              [key: string]:
+                | {
+                    /** @enum {string} */
+                    type: 'fixFound'
+                    value: {
+                      /**
+                       * @default fixFound
+                       * @enum {string}
+                       */
+                      type: 'fixFound'
+                      /** @default */
+                      ghsa: string
+                      /** @default */
+                      cve: string | null
+                      fixDetails: {
+                        fixes: Array<{
+                          /** @default The PURL (unique package identifier) of the package to upgrade */
+                          purl: string
+                          /** @default The version of the package to upgrade to */
+                          fixedVersion: string
+                          manifestFiles: string[]
+                          /**
+                           * @description The type of version update (patch, minor, major, or unknown if it cannot be determined)
+                           * @default unknown
+                           * @enum {string}
+                           */
+                          updateType: 'patch' | 'minor' | 'major' | 'unknown'
+                        }>
+                        /** @description The keys are the PURL (unique package identifier) of the direct dependency(ies) responsible for introducing the vulnerability. */
+                        responsibleDirectDependencies?: {
+                          [key: string]: {
+                            /**
+                             * Format: The current version of the package
+                             * @default
+                             */
+                            currentVersion: string
+                            nextAvailableVersion?: {
+                              /**
+                               * Format: The next available version of the package
+                               * @default
+                               */
+                              version: string
+                              /**
+                               * @description The type of version update (patch, minor, major, or unknown if it cannot be determined)
+                               * @default unknown
+                               * @enum {string}
+                               */
+                              updateType:
+                                | 'patch'
+                                | 'minor'
+                                | 'major'
+                                | 'unknown'
+                            } | null
+                            /** @description The version and update type of the package that is necessary to fix the vulnerability. If the value is null, it means the package does not have to be upgraded to fix the vulnerability */
+                            fixByUpgradingTo?: {
+                              /** @default */
+                              version: string
+                              /**
+                               * @description The type of version update (patch, minor, major, or unknown if it cannot be determined)
+                               * @default unknown
+                               * @enum {string}
+                               */
+                              updateType:
+                                | 'patch'
+                                | 'minor'
+                                | 'major'
+                                | 'unknown'
+                            } | null
+                          }
+                        } | null
+                      }
+                      advisoryDetails: {
+                        /** @default */
+                        title?: string | null
+                        /** @default */
+                        description?: string | null
+                        cwes?: string[]
+                        /**
+                         * @description Severity level of the vulnerability
+                         * @default LOW
+                         * @enum {string}
+                         */
+                        severity?: 'LOW' | 'MODERATE' | 'HIGH' | 'CRITICAL'
+                        /** @default */
+                        cvssVector?: string | null
+                        /** @default */
+                        publishedAt?: string
+                        /**
+                         * @description Whether the vulnerability is a Known Exploited Vulnerability
+                         * @default false
+                         */
+                        kev?: boolean
+                        /**
+                         * @description Exploit Prediction Scoring System score
+                         * @default 0
+                         */
+                        epss?: number | null
+                        affectedPurls?: Array<{
+                          /**
+                           * Format: The PURL (unique package identifier) of the affected package
+                           * @default
+                           */
+                          purl: string
+                          /** @default The range of vulnerable versions */
+                          affectedRange: string
+                        }>
+                      } | null
+                    }
+                  }
+                | {
+                    /** @enum {string} */
+                    type: 'partialFixFound'
+                    value: {
+                      /**
+                       * @default partialFixFound
+                       * @enum {string}
+                       */
+                      type: 'partialFixFound'
+                      /** @default */
+                      ghsa: string
+                      /** @default */
+                      cve: string | null
+                      fixDetails: {
+                        fixes: Array<{
+                          /** @default The PURL (unique package identifier) of the package to upgrade */
+                          purl: string
+                          /** @default The version of the package to upgrade to */
+                          fixedVersion: string
+                          manifestFiles: string[]
+                          /**
+                           * @description The type of version update (patch, minor, major, or unknown if it cannot be determined)
+                           * @default unknown
+                           * @enum {string}
+                           */
+                          updateType: 'patch' | 'minor' | 'major' | 'unknown'
+                        }>
+                        unfixablePurls: Array<{
+                          /** @default The PURL (unique package identifier) of the package that cannot be upgraded */
+                          purl: string
+                          manifestFiles: string[]
+                        }>
+                        /** @description The keys are the PURL (unique package identifier) of the direct dependency(ies) responsible for introducing the vulnerability. */
+                        responsibleDirectDependencies?: {
+                          [key: string]: {
+                            /**
+                             * Format: The current version of the package
+                             * @default
+                             */
+                            currentVersion: string
+                            nextAvailableVersion?: {
+                              /**
+                               * Format: The next available version of the package
+                               * @default
+                               */
+                              version: string
+                              /**
+                               * @description The type of version update (patch, minor, major, or unknown if it cannot be determined)
+                               * @default unknown
+                               * @enum {string}
+                               */
+                              updateType:
+                                | 'patch'
+                                | 'minor'
+                                | 'major'
+                                | 'unknown'
+                            } | null
+                            /** @description The version and update type of the package that is necessary to fix the vulnerability. If the value is null, it means the package does not have to be upgraded to fix the vulnerability */
+                            fixByUpgradingTo?: {
+                              /** @default */
+                              version: string
+                              /**
+                               * @description The type of version update (patch, minor, major, or unknown if it cannot be determined)
+                               * @default unknown
+                               * @enum {string}
+                               */
+                              updateType:
+                                | 'patch'
+                                | 'minor'
+                                | 'major'
+                                | 'unknown'
+                            } | null
+                          }
+                        } | null
+                      }
+                      advisoryDetails: {
+                        /** @default */
+                        title?: string | null
+                        /** @default */
+                        description?: string | null
+                        cwes?: string[]
+                        /**
+                         * @description Severity level of the vulnerability
+                         * @default LOW
+                         * @enum {string}
+                         */
+                        severity?: 'LOW' | 'MODERATE' | 'HIGH' | 'CRITICAL'
+                        /** @default */
+                        cvssVector?: string | null
+                        /** @default */
+                        publishedAt?: string
+                        /**
+                         * @description Whether the vulnerability is a Known Exploited Vulnerability
+                         * @default false
+                         */
+                        kev?: boolean
+                        /**
+                         * @description Exploit Prediction Scoring System score
+                         * @default 0
+                         */
+                        epss?: number | null
+                        affectedPurls?: Array<{
+                          /**
+                           * Format: The PURL (unique package identifier) of the affected package
+                           * @default
+                           */
+                          purl: string
+                          /** @default The range of vulnerable versions */
+                          affectedRange: string
+                        }>
+                      } | null
+                    }
+                  }
+                | {
+                    /** @enum {string} */
+                    type: 'errorComputingFix'
+                    value: {
+                      /**
+                       * @default errorComputingFix
+                       * @enum {string}
+                       */
+                      type: 'errorComputingFix'
+                      /** @default */
+                      ghsa: string | null
+                      /** @default */
+                      cve: string | null
+                      /** @default */
+                      message: string
+                      advisoryDetails: {
+                        /** @default */
+                        title?: string | null
+                        /** @default */
+                        description?: string | null
+                        cwes?: string[]
+                        /**
+                         * @description Severity level of the vulnerability
+                         * @default LOW
+                         * @enum {string}
+                         */
+                        severity?: 'LOW' | 'MODERATE' | 'HIGH' | 'CRITICAL'
+                        /** @default */
+                        cvssVector?: string | null
+                        /** @default */
+                        publishedAt?: string
+                        /**
+                         * @description Whether the vulnerability is a Known Exploited Vulnerability
+                         * @default false
+                         */
+                        kev?: boolean
+                        /**
+                         * @description Exploit Prediction Scoring System score
+                         * @default 0
+                         */
+                        epss?: number | null
+                        affectedPurls?: Array<{
+                          /**
+                           * Format: The PURL (unique package identifier) of the affected package
+                           * @default
+                           */
+                          purl: string
+                          /** @default The range of vulnerable versions */
+                          affectedRange: string
+                        }>
+                      } | null
+                    }
+                  }
+                | {
+                    /** @enum {string} */
+                    type: 'noFixAvailable'
+                    value: {
+                      /**
+                       * @default noFixAvailable
+                       * @enum {string}
+                       */
+                      type: 'noFixAvailable'
+                      /** @default */
+                      ghsa: string
+                      /** @default */
+                      cve: string | null
+                      advisoryDetails: {
+                        /** @default */
+                        title?: string | null
+                        /** @default */
+                        description?: string | null
+                        cwes?: string[]
+                        /**
+                         * @description Severity level of the vulnerability
+                         * @default LOW
+                         * @enum {string}
+                         */
+                        severity?: 'LOW' | 'MODERATE' | 'HIGH' | 'CRITICAL'
+                        /** @default */
+                        cvssVector?: string | null
+                        /** @default */
+                        publishedAt?: string
+                        /**
+                         * @description Whether the vulnerability is a Known Exploited Vulnerability
+                         * @default false
+                         */
+                        kev?: boolean
+                        /**
+                         * @description Exploit Prediction Scoring System score
+                         * @default 0
+                         */
+                        epss?: number | null
+                        affectedPurls?: Array<{
+                          /**
+                           * Format: The PURL (unique package identifier) of the affected package
+                           * @default
+                           */
+                          purl: string
+                          /** @default The range of vulnerable versions */
+                          affectedRange: string
+                        }>
+                      } | null
+                    }
+                  }
+                | {
+                    /** @enum {string} */
+                    type: 'fixNotApplicable'
+                    value: {
+                      /**
+                       * @default fixNotApplicable
+                       * @enum {string}
+                       */
+                      type: 'fixNotApplicable'
+                      /** @default */
+                      ghsa: string
+                      /** @default */
+                      cve: string | null
+                      advisoryDetails: {
+                        /** @default */
+                        title?: string | null
+                        /** @default */
+                        description?: string | null
+                        cwes?: string[]
+                        /**
+                         * @description Severity level of the vulnerability
+                         * @default LOW
+                         * @enum {string}
+                         */
+                        severity?: 'LOW' | 'MODERATE' | 'HIGH' | 'CRITICAL'
+                        /** @default */
+                        cvssVector?: string | null
+                        /** @default */
+                        publishedAt?: string
+                        /**
+                         * @description Whether the vulnerability is a Known Exploited Vulnerability
+                         * @default false
+                         */
+                        kev?: boolean
+                        /**
+                         * @description Exploit Prediction Scoring System score
+                         * @default 0
+                         */
+                        epss?: number | null
+                        affectedPurls?: Array<{
+                          /**
+                           * Format: The PURL (unique package identifier) of the affected package
+                           * @default
+                           */
+                          purl: string
+                          /** @default The range of vulnerable versions */
+                          affectedRange: string
+                        }>
+                      } | null
+                    }
+                  }
+            }
+          }
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
+  /**
+   * Get Organization Telemetry Config
+   * @description Retrieve the telemetry config of an organization.
+   *
+   * This endpoint consumes 1 unit of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   */
+  getOrgTelemetryConfig: {
+    parameters: {
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+      }
+    }
+    responses: {
+      /** @description Retrieved telemetry config details */
+      200: {
+        content: {
+          'application/json': {
+            /** @description Telemetry configuration */
+            telemetry: {
+              /**
+               * @description Telemetry enabled
+               * @default false
+               */
+              enabled: boolean
+            }
+          }
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
+  /**
+   * Update Telemetry Config
+   * @description Update the telemetry config of an organization.
+   *
+   * This endpoint consumes 1 unit of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - telemetry-policy:update
+   */
+  updateOrgTelemetryConfig: {
+    parameters: {
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+      }
+    }
+    requestBody?: {
+      content: {
+        'application/json': {
+          /**
+           * @description Telemetry enabled
+           * @default false
+           */
+          enabled?: boolean
+        }
+      }
+    }
+    responses: {
+      /** @description Updated telemetry config details */
+      200: {
+        content: {
+          'application/json': {
+            /** @description Telemetry configuration */
+            telemetry: {
+              /**
+               * @description Telemetry enabled
+               * @default false
+               */
+              enabled: boolean
+            }
+          }
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
+  /**
+   * List all webhooks
+   * @description List all webhooks in the specified organization.
+   *
+   * This endpoint consumes 1 unit of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - webhooks:list
+   */
+  getOrgWebhooksList: {
+    parameters: {
+      query?: {
+        sort?: string
+        direction?: string
+        per_page?: number
+        page?: number
+      }
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+      }
+    }
+    responses: {
+      /** @description List of webhooks */
+      200: {
+        content: {
+          'application/json': {
+            results: Array<{
+              /**
+               * @description The ID of the webhook
+               * @default
+               */
+              id: string
+              /**
+               * @description The creation date of the webhook
+               * @default
+               */
+              created_at: string
+              /**
+               * @description The last update date of the webhook
+               * @default
+               */
+              updated_at: string
+              /**
+               * @description The name of the webhook
+               * @default
+               */
+              name: string
+              /**
+               * @description The description of the webhook
+               * @default
+               */
+              description: string | null
+              /**
+               * @description The URL where webhook events will be sent
+               * @default
+               */
+              url: string
+              /**
+               * @description The signing key used to sign webhook payloads
+               * @default
+               */
+              secret: string | null
+              /** @description Array of event names */
+              events: string[]
+              /**
+               * @description Custom headers to include in webhook requests
+               * @default null
+               */
+              headers: Record<string, unknown> | null
+              filters: {
+                /** @description Array of repository IDs */
+                repositoryIds: string[] | null
+              } | null
+            }>
+            /** @default 0 */
+            nextPage: number | null
+          }
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
+  /**
+   * Create a webhook
+   * @description Create a new webhook. Returns the created webhook details.
+   *
+   * This endpoint consumes 1 unit of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - webhooks:create
+   */
+  createOrgWebhook: {
+    parameters: {
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+      }
+    }
+    requestBody?: {
+      content: {
+        'application/json': {
+          /**
+           * @description The name of the webhook
+           * @default
+           */
+          name: string
+          /**
+           * @description The URL where webhook events will be sent
+           * @default
+           */
+          url: string
+          /**
+           * @description The signing key used to sign webhook payloads
+           * @default
+           */
+          secret: string
+          /** @description Array of event names */
+          events: string[]
+          /**
+           * @description The description of the webhook
+           * @default
+           */
+          description?: string | null
+          /**
+           * @description Custom headers to include in webhook requests
+           * @default null
+           */
+          headers?: Record<string, unknown> | null
+          filters?: {
+            /** @description Array of repository IDs */
+            repositoryIds: string[] | null
+          } | null
+        }
+      }
+    }
+    responses: {
+      /** @description The created webhook */
+      201: {
+        content: {
+          'application/json': {
+            /**
+             * @description The ID of the webhook
+             * @default
+             */
+            id: string
+            /**
+             * @description The creation date of the webhook
+             * @default
+             */
+            created_at: string
+            /**
+             * @description The last update date of the webhook
+             * @default
+             */
+            updated_at: string
+            /**
+             * @description The name of the webhook
+             * @default
+             */
+            name: string
+            /**
+             * @description The description of the webhook
+             * @default
+             */
+            description: string | null
+            /**
+             * @description The URL where webhook events will be sent
+             * @default
+             */
+            url: string
+            /**
+             * @description The signing key used to sign webhook payloads
+             * @default
+             */
+            secret: string | null
+            /** @description Array of event names */
+            events: string[]
+            /**
+             * @description Custom headers to include in webhook requests
+             * @default null
+             */
+            headers: Record<string, unknown> | null
+            filters: {
+              /** @description Array of repository IDs */
+              repositoryIds: string[] | null
+            } | null
+          }
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
+  /**
+   * Get webhook
+   * @description Get a webhook for the specified organization.
+   *
+   * This endpoint consumes 1 unit of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - webhooks:list
+   */
+  getOrgWebhook: {
+    parameters: {
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+        /** @description The ID of the webhook */
+        webhook_id: string
+      }
+    }
+    responses: {
+      /** @description Webhook details */
+      200: {
+        content: {
+          'application/json': {
+            /**
+             * @description The ID of the webhook
+             * @default
+             */
+            id: string
+            /**
+             * @description The creation date of the webhook
+             * @default
+             */
+            created_at: string
+            /**
+             * @description The last update date of the webhook
+             * @default
+             */
+            updated_at: string
+            /**
+             * @description The name of the webhook
+             * @default
+             */
+            name: string
+            /**
+             * @description The description of the webhook
+             * @default
+             */
+            description: string | null
+            /**
+             * @description The URL where webhook events will be sent
+             * @default
+             */
+            url: string
+            /**
+             * @description The signing key used to sign webhook payloads
+             * @default
+             */
+            secret: string | null
+            /** @description Array of event names */
+            events: string[]
+            /**
+             * @description Custom headers to include in webhook requests
+             * @default null
+             */
+            headers: Record<string, unknown> | null
+            filters: {
+              /** @description Array of repository IDs */
+              repositoryIds: string[] | null
+            } | null
+          }
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
+  /**
+   * Update webhook
+   * @description Update details of an existing webhook.
+   *
+   * This endpoint consumes 1 unit of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - webhooks:update
+   */
+  updateOrgWebhook: {
+    parameters: {
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+        /** @description The ID of the webhook */
+        webhook_id: string
+      }
+    }
+    requestBody?: {
+      content: {
+        'application/json': {
+          /**
+           * @description The name of the webhook
+           * @default
+           */
+          name?: string
+          /**
+           * @description The description of the webhook
+           * @default
+           */
+          description?: string | null
+          /**
+           * @description The URL where webhook events will be sent
+           * @default
+           */
+          url?: string
+          /**
+           * @description The signing key used to sign webhook payloads
+           * @default
+           */
+          secret?: string | null
+          /** @description Array of event names */
+          events?: string[]
+          /**
+           * @description Custom headers to include in webhook requests
+           * @default null
+           */
+          headers?: Record<string, unknown> | null
+          filters?: {
+            /** @description Array of repository IDs */
+            repositoryIds: string[] | null
+          } | null
+        }
+      }
+    }
+    responses: {
+      /** @description Updated webhook details */
+      200: {
+        content: {
+          'application/json': {
+            /**
+             * @description The ID of the webhook
+             * @default
+             */
+            id: string
+            /**
+             * @description The creation date of the webhook
+             * @default
+             */
+            created_at: string
+            /**
+             * @description The last update date of the webhook
+             * @default
+             */
+            updated_at: string
+            /**
+             * @description The name of the webhook
+             * @default
+             */
+            name: string
+            /**
+             * @description The description of the webhook
+             * @default
+             */
+            description: string | null
+            /**
+             * @description The URL where webhook events will be sent
+             * @default
+             */
+            url: string
+            /**
+             * @description The signing key used to sign webhook payloads
+             * @default
+             */
+            secret: string | null
+            /** @description Array of event names */
+            events: string[]
+            /**
+             * @description Custom headers to include in webhook requests
+             * @default null
+             */
+            headers: Record<string, unknown> | null
+            filters: {
+              /** @description Array of repository IDs */
+              repositoryIds: string[] | null
+            } | null
+          }
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
+  /**
+   * Delete webhook
+   * @description Delete a webhook. This will stop all future webhook deliveries to the webhook URL.
+   *
+   * This endpoint consumes 1 unit of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - webhooks:delete
+   */
+  deleteOrgWebhook: {
+    parameters: {
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+        /** @description The ID of the webhook */
+        webhook_id: string
+      }
+    }
+    responses: {
+      /** @description Success */
+      200: {
+        content: {
+          'application/json': {
+            /** @default ok */
+            status: string
+          }
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
+  /**
+   * List latest alerts (Beta)
+   * @description List latest alerts.
    *
-   * This endpoint consumes 1 unit of your quota.
+   * This endpoint consumes 10 units of your quota.
    *
    * This endpoint requires the following org token scopes:
-   * - threat-feed:list
+   * - alerts:list
    */
-  getOrgThreatFeedItems: {
+  alertsList: {
     parameters: {
       query?: {
-        /** @description Number of threats per page */
+        /** @description Specify the maximum number of results to return per page (intermediate pages may have fewer than this limit and callers should always check "endCursor" in response body to know if there are more pages) */
         per_page?: number
-        /** @description Page cursor token. Pass the returned nextPageCursor to this query string to fetch the next page of the threat feed. */
-        page_cursor?: string
-        /** @description Set the sort order for the threat feed items. Default is descending order by updated_at, which includes all new and updated threat feed items. */
-        sort?: 'id' | 'created_at' | 'updated_at'
-        /** @description A Unix timestamp in seconds that filters results to items only updated after the timestamp. */
-        updated_after?: string
-        /** @description A Unix timestamp in seconds that filters results to items only created after the date. */
-        created_after?: string
-        /** @description Order direction of the provided sort field. */
-        direction?: 'desc' | 'asc'
-        /** @description Filter what type of threats to return */
-        filter?:
-          | 'u'
-          | 'c'
-          | 'fp'
-          | 'tp'
-          | 'mal'
-          | 'vuln'
-          | 'anom'
-          | 'joke'
-          | 'spy'
-          | 'typo'
-          | 'secret'
-          | 'obf'
-          | 'dual'
-        /** @description Filter threats by package name */
-        name?: string
-        /** @description Filter threats by package version. */
-        version?: string
-        /** @description Only return threats which have been human-reviewed */
-        is_human_reviewed?: boolean
-        /** @description Filter threats by package ecosystem type */
-        ecosystem?:
-          | 'github'
-          | 'cargo'
-          | 'chrome'
-          | 'golang'
-          | 'huggingface'
-          | 'maven'
-          | 'npm'
-          | 'nuget'
-          | 'vscode'
-          | 'pypi'
-          | 'gem'
+        /** @description The pagination cursor that was returned as the "endCursor" property in previous request */
+        startAfterCursor?: string
+        /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be included */
+        'filters.alertAction'?: string
+        /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be excluded */
+        'filters.alertAction.notIn'?: string
+        /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be included */
+        'filters.alertCategory'?: string
+        /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be excluded */
+        'filters.alertCategory.notIn'?: string
+        /** @description CVE ID */
+        'filters.alertCveId'?: string
+        /** @description CVE ID */
+        'filters.alertCveId.notIn'?: string
+        /** @description CVE title */
+        'filters.alertCveTitle'?: string
+        /** @description CVE title */
+        'filters.alertCveTitle.notIn'?: string
+        /** @description CWE ID */
+        'filters.alertCweId'?: string
+        /** @description CWE ID */
+        'filters.alertCweId.notIn'?: string
+        /** @description CWE name */
+        'filters.alertCweName'?: string
+        /** @description CWE name */
+        'filters.alertCweName.notIn'?: string
+        /** @description Alert EPSS ("low", "medium", "high", "critical") */
+        'filters.alertEPSS'?: string
+        /** @description Alert EPSS ("low", "medium", "high", "critical") */
+        'filters.alertEPSS.notIn'?: string
+        /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be included */
+        'filters.alertFixType'?: string
+        /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be excluded */
+        'filters.alertFixType.notIn'?: string
+        /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
+        'filters.alertKEV'?: boolean
+        /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
+        'filters.alertKEV.notIn'?: boolean
+        /** @description Alert priority ("low", "medium", "high", or "critical") */
+        'filters.alertPriority'?: string
+        /** @description Alert priority ("low", "medium", "high", or "critical") */
+        'filters.alertPriority.notIn'?: string
+        /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be included */
+        'filters.alertReachabilityType'?: string
+        /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be excluded */
+        'filters.alertReachabilityType.notIn'?: string
+        /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be included */
+        'filters.alertSeverity'?: string
+        /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be excluded */
+        'filters.alertSeverity.notIn'?: string
+        /** @description A single alert status ("open" or "cleared") */
+        'filters.alertStatus'?: string
+        /** @description A single alert status ("open" or "cleared") */
+        'filters.alertStatus.notIn'?: string
+        /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be included */
+        'filters.alertType'?: string
+        /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be excluded */
+        'filters.alertType.notIn'?: string
+        /** @description Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertUpdatedAt.eq'?: string
+        /** @description Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertUpdatedAt.lt'?: string
+        /** @description Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertUpdatedAt.lte'?: string
+        /** @description Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertUpdatedAt.gt'?: string
+        /** @description Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertUpdatedAt.gte'?: string
+        /** @description Comma-separated list of repo full names that should be included */
+        'filters.repoFullName'?: string
+        /** @description Comma-separated list of repo full names that should be excluded */
+        'filters.repoFullName.notIn'?: string
+        /** @description Comma-separated list of repo labels that should be included. Use "" to filter for repositories with no labels. */
+        'filters.repoLabels'?: string
+        /** @description Comma-separated list of repo labels that should be excluded. Use "" to filter for repositories with no labels. */
+        'filters.repoLabels.notIn'?: string
+        /** @description Comma-separated list of repo slugs that should be included */
+        'filters.repoSlug'?: string
+        /** @description Comma-separated list of repo slugs that should be excluded */
+        'filters.repoSlug.notIn'?: string
       }
       path: {
         /** @description The slug of the organization */
@@ -14132,44 +15752,247 @@ export interface operations {
       }
     }
     responses: {
-      /** @description The paginated list of items in the threat feed and the next page cursor. */
+      /** @description The paginated array of API tokens for the organization, and related metadata. */
       200: {
         content: {
           'application/json': {
-            results: Array<{
+            /** @default */
+            endCursor: string | null
+            items: Array<{
               /** @default */
-              createdAt?: string
+              key: string
               /** @default */
-              updatedAt?: string
+              type: string
               /** @default */
-              description?: string
-              /** @default 0 */
-              id?: number
+              category: string
+              fix: {
+                /** @default */
+                type: string
+                /** @default */
+                description: string | null
+              } | null
+              vulnerability: {
+                /** @default */
+                cveId: string | null
+                /** @default */
+                cveTitle: string | null
+                /** @default */
+                cveDescription: string | null
+                /** @default 0 */
+                cvssScore: number
+                cweIds: string[] | null
+                cweNames: string[] | null
+                ghsaIds: string[] | null
+                /** @default 0 */
+                epssScore: number
+                /** @default 0 */
+                epssPercentile: number
+                /** @default false */
+                isKev: boolean
+              } | null
               /** @default */
-              locationHtmlUrl?: string
+              id: string
+              /** @default 0 */
+              version: number
+              /**
+               * @default open
+               * @enum {string}
+               */
+              status: 'open' | 'cleared'
               /** @default */
-              packageHtmlUrl?: string
+              createdAt: string
               /** @default */
-              purl?: string
+              updatedAt: string
               /** @default */
-              removedAt?: string | null
+              clearedAt: string | null
               /** @default */
-              threatType?: string
+              dashboardUrl: string
               /**
-               * @description Whether the threat still is in need of human review by the threat research team
-               * @default false
+               * @default low
+               * @enum {string}
                */
-              needsHumanReview?: boolean
+              severity: 'low' | 'medium' | 'high' | 'critical'
+              locations: {
+                /** @default */
+                action: string
+                /** @default */
+                actionSourceType: string
+                reachability: {
+                  /** @default */
+                  type: string
+                  /** @default */
+                  analysisType: string | null
+                }
+                licenseViolation: {
+                  violationData: {
+                    /** @default */
+                    purl: string | null
+                    /** @default */
+                    spdxAtomOrExtraData: string
+                  }[]
+                } | null
+                prioritization: {
+                  /** @default 0 */
+                  overallScore: number
+                  /** @default 0 */
+                  fixableScore: number
+                  /** @default 0 */
+                  reachableScore: number
+                  /** @default 0 */
+                  severityScore: number
+                }
+                repository: {
+                  /** @default */
+                  fullName: string | null
+                  /** @default */
+                  id: string | null
+                  /** @default */
+                  slug: string | null
+                  /** @default */
+                  workspace: string | null
+                  labels: string[]
+                  labelIds: string[]
+                } | null
+                branch: {
+                  /** @default */
+                  name: string
+                  /** @default */
+                  type: string | null
+                } | null
+                patch: {
+                  /** @default */
+                  uuid: string | null
+                  /**
+                   * @default patch_unavailable
+                   * @enum {string}
+                   */
+                  status:
+                    | 'patch_unavailable'
+                    | 'patch_available'
+                    | 'patch_applied'
+                  /** @default false */
+                  deprecated: boolean
+                }
+                dependency: {
+                  /** @default false */
+                  direct: boolean
+                  /** @default false */
+                  dev: boolean
+                  /** @default false */
+                  dead: boolean
+                  manifestFiles: components['schemas']['SocketManifestReference'][]
+                }
+                artifact: {
+                  /** @default */
+                  type: string
+                  /** @default */
+                  namespace: string | null
+                  /** @default */
+                  name: string
+                  /** @default */
+                  id: string
+                  /** @default */
+                  version: string
+                  /** @default */
+                  author: string | null
+                  /** @default */
+                  license: string | null
+                  scores: components['schemas']['SocketScore']
+                  /** @default */
+                  artifactId: string | null
+                }
+              }[]
             }>
-            /** @default */
-            nextPageCursor: string | null
+            meta: {
+              /** @default */
+              organizationId: string
+              /** @default 0 */
+              queryStartTimestamp: number
+              filters: {
+                /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be included */
+                alertAction?: string[]
+                /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be excluded */
+                'alertAction.notIn'?: string[]
+                /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be included */
+                alertCategory?: string[]
+                /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be excluded */
+                'alertCategory.notIn'?: string[]
+                /** @description CVE ID */
+                alertCveId?: string[]
+                /** @description CVE ID */
+                'alertCveId.notIn'?: string[]
+                /** @description CVE title */
+                alertCveTitle?: string[]
+                /** @description CVE title */
+                'alertCveTitle.notIn'?: string[]
+                /** @description CWE ID */
+                alertCweId?: string[]
+                /** @description CWE ID */
+                'alertCweId.notIn'?: string[]
+                /** @description CWE name */
+                alertCweName?: string[]
+                /** @description CWE name */
+                'alertCweName.notIn'?: string[]
+                /** @description Alert EPSS ("low", "medium", "high", "critical") */
+                alertEPSS?: string[]
+                /** @description Alert EPSS ("low", "medium", "high", "critical") */
+                'alertEPSS.notIn'?: string[]
+                /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be included */
+                alertFixType?: string[]
+                /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be excluded */
+                'alertFixType.notIn'?: string[]
+                /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
+                alertKEV?: boolean[]
+                /** @description Alert priority ("low", "medium", "high", or "critical") */
+                alertPriority?: string[]
+                /** @description Alert priority ("low", "medium", "high", or "critical") */
+                'alertPriority.notIn'?: string[]
+                /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be included */
+                alertReachabilityType?: string[]
+                /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be excluded */
+                'alertReachabilityType.notIn'?: string[]
+                /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be included */
+                alertSeverity?: string[]
+                /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be excluded */
+                'alertSeverity.notIn'?: string[]
+                /** @description A single alert status ("open" or "cleared") */
+                alertStatus?: string[]
+                /** @description A single alert status ("open" or "cleared") */
+                'alertStatus.notIn'?: string[]
+                /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be included */
+                alertType?: string[]
+                /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be excluded */
+                'alertType.notIn'?: string[]
+                /** @description Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertUpdatedAt.eq'?: string[]
+                /** @description Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertUpdatedAt.lt'?: string[]
+                /** @description Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertUpdatedAt.lte'?: string[]
+                /** @description Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertUpdatedAt.gt'?: string[]
+                /** @description Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertUpdatedAt.gte'?: string[]
+                /** @description Comma-separated list of repo full names that should be included */
+                repoFullName?: string[]
+                /** @description Comma-separated list of repo full names that should be excluded */
+                'repoFullName.notIn'?: string[]
+                /** @description Comma-separated list of repo labels that should be included. Use "" to filter for repositories with no labels. */
+                repoLabels?: string[]
+                /** @description Comma-separated list of repo labels that should be excluded. Use "" to filter for repositories with no labels. */
+                'repoLabels.notIn'?: string[]
+                /** @description Comma-separated list of repo slugs that should be included */
+                repoSlug?: string[]
+                /** @description Comma-separated list of repo slugs that should be excluded */
+                'repoSlug.notIn'?: string[]
+              }
+            }
           }
         }
       }
       400: components['responses']['SocketBadRequest']
       401: components['responses']['SocketUnauthorized']
       403: components['responses']['SocketForbidden']
-      404: components['responses']['SocketNotFoundResponse']
       429: components['responses']['SocketTooManyRequestsResponse']
     }
   }
@@ -15277,8 +17100,7 @@ export interface operations {
       404: components['responses']['SocketNotFoundResponse']
       429: components['responses']['SocketTooManyRequestsResponse']
     }
-  }
-  // SDK v3 method name aliases for TypeScript compatibility.
+  } // SDK v3 method name aliases for TypeScript compatibility.
   // These map the new SDK method names to their underlying OpenAPI operation names.
   listOrganizations: operations['getOrganizations']
   listRepositories: operations['getOrgRepoList']