@socketsecurity/sdk 3.1.3 → 3.3.0

package/types/api.d.ts

@@ -7,12 +7,17 @@ export interface paths {
   '/purl': {
     /**
      * Get Packages by PURL
-     * @description Batch retrieval of package metadata and alerts by PURL strings. Compatible witch CycloneDX reports.
+     * @deprecated
+     * @description **This endpoint is deprecated.** Deprecated since 2026-01-05. It will be removed on 2026-07-30.
+     *
+     * Batch retrieval of package metadata and alerts by PURL strings. Compatible with CycloneDX reports.
      *
      * Package URLs (PURLs) are an ecosystem agnostic way to identify packages.
      * CycloneDX SBOMs use the purl format to identify components.
      * This endpoint supports fetching metadata and alerts for multiple packages at once by passing an array of purl strings, or by passing an entire CycloneDX report.
      *
+     * **Note:** This endpoint has a batch size limit (default: 1024 PURLs per request). Requests exceeding this limit will return a 400 Bad Request error.
+     *
      * More information on purl and CycloneDX:
      *
      * - [`purl` Spec](https://github.com/package-url/purl-spec)
@@ -133,7 +138,7 @@ export interface paths {
      *
      * To get a list of supported filetypes that can be uploaded in a full-scan, see the [Get supported file types](/reference/getsupportedfiles) endpoint.
      *
-     * The maximum number of files you can upload at a time is 5000 and each file can be no bigger than 67 MB.
+     * The maximum number of files you can upload at a time is 5000 and each file can be no bigger than 268 MB.
      *
      * **Query Parameters:**
      * - `scan_type` (optional): The type of scan to perform. Defaults to 'socket'. Must be 32 characters or less. Used for categorizing multiple SBOM heads per repository branch.
@@ -212,6 +217,46 @@ export interface paths {
      */
     get: operations['GetOrgFullScanDiffGfm']
   }
+  '/orgs/{org_slug}/full-scans/{full_scan_id}/files/tar': {
+    /**
+     * Download full scan files as tarball
+     * @description Download all files associated with a full scan in tar format.
+     *
+     * This endpoint consumes 1 unit of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - full-scans:list
+     */
+    get: operations['downloadOrgFullScanFilesAsTar']
+  }
+  '/orgs/{org_slug}/full-scans/archive': {
+    /**
+     * Create full scan from archive
+     * @description Create a full scan by uploading one or more archives. Supported archive formats include **.tar**, **.tar.gz/.tgz**, and **.zip**.
+     *
+     * Each uploaded archive is extracted server-side and any supported manifest files (like package.json, package-lock.json, pnpm-lock.yaml, etc.) are ingested for the scan. If you upload multiple archives in a single request, the manifests from every archive are merged into one full scan. The response includes any files that were ignored.
+     *
+     * The maximum combined number of files extracted from your upload is 5000 and each extracted file can be no bigger than 268 MB.
+     *
+     * This endpoint consumes 1 unit of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - full-scans:create
+     */
+    post: operations['CreateOrgFullScanArchive']
+  }
+  '/orgs/{org_slug}/full-scans/{full_scan_id}/rescan': {
+    /**
+     * Rescan full scan
+     * @description Create a new full scan by rescanning an existing scan. A "shallow" rescan reapplies the latest policies to the previously cached dependency resolution results. A "deep" rescan reruns dependency resolution and applies the latest policies to the results.
+     *
+     * This endpoint consumes 1 unit of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - full-scans:create
+     */
+    post: operations['rescanOrgFullScan']
+  }
   '/orgs/{org_slug}/export/cdx/{id}': {
     /**
      * Export CycloneDX SBOM (Beta)
@@ -238,6 +283,31 @@ export interface paths {
      */
     get: operations['exportCDX']
   }
+  '/orgs/{org_slug}/export/openvex/{id}': {
+    /**
+     * Export OpenVEX Document (Beta)
+     * @description Export vulnerability exploitability data as an OpenVEX v0.2.0 document.
+     *
+     * OpenVEX (Vulnerability Exploitability eXchange) documents communicate the
+     * exploitability status of vulnerabilities in software products. This export
+     * includes:
+     *
+     * - **Patch data**: Vulnerabilities fixed by applied Socket patches are marked as "fixed"
+     * - **Reachability analysis**: Code reachability determines if vulnerable code is exploitable:
+     * - Unreachable code → "not_affected" with justification
+     * - Reachable code → "affected"
+     * - Unknown/pending → "under_investigation"
+     *
+     * Each statement in the document represents a single artifact-vulnerability pair
+     * for granular reachability information.
+     *
+     * This endpoint consumes 1 unit of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - report:read
+     */
+    get: operations['exportOpenVEX']
+  }
   '/orgs/{org_slug}/export/spdx/{id}': {
     /**
      * Export SPDX SBOM (Beta)
@@ -317,7 +387,7 @@ export interface paths {
      * Returns metadata about the diff scan. Once the diff scan is created, fetch the diff scan from
      * the [api_url](/reference/getDiffScanById) URL to get the contents of the diff.
      *
-     * The maximum number of files you can upload at a time is 5000 and each file can be no bigger than 67 MB.
+     * The maximum number of files you can upload at a time is 5000 and each file can be no bigger than 268 MB.
      *
      * This endpoint consumes 1 unit of your quota.
      *
@@ -901,6 +971,271 @@ export interface paths {
      */
     get: operations['getOrgThreatFeedItems']
   }
+  '/orgs/{org_slug}/purl': {
+    /**
+     * Get Packages by PURL (Org Scoped)
+     * @description Batch retrieval of package metadata and alerts by PURL strings for a specific organization. Compatible with CycloneDX reports.
+     *
+     * Package URLs (PURLs) are an ecosystem agnostic way to identify packages.
+     * CycloneDX SBOMs use the purl format to identify components.
+     * This endpoint supports fetching metadata and alerts for multiple packages at once by passing an array of purl strings, or by passing an entire CycloneDX report.
+     *
+     * **Note:** This endpoint has a batch size limit (default: 1024 PURLs per request). Requests exceeding this limit will return a 400 Bad Request error.
+     *
+     * More information on purl and CycloneDX:
+     *
+     * - [`purl` Spec](https://github.com/package-url/purl-spec)
+     * - [CycloneDX Spec](https://cyclonedx.org/specification/overview/#components)
+     *
+     * This endpoint returns the latest available alert data for artifacts in the batch (stale while revalidate).
+     * Actively running analysis will be returned when available on subsequent runs.
+     *
+     * ## Query Parameters
+     *
+     * This endpoint supports all query parameters from `POST /v0/purl` including: `alerts`, `actions`, `compact`, `fixable`, `licenseattrib`, `licensedetails`, `purlErrors`, `cachedResultsOnly`, and `summary`.
+     *
+     * Additionally, you may provide a `labels` query parameter to apply a repository label's security policies. Pass the label slug as the value (e.g., `?labels=production`). Only one label is currently supported.
+     *
+     * ## Examples:
+     *
+     * ### Looking up an npm package:
+     *
+     * ```json
+     * {
+     *   "components": [
+     *     {
+     *       "purl": "pkg:npm/express@4.19.2"
+     *     }
+     *   ]
+     * }
+     * ```
+     *
+     * ### Looking up a PyPi package:
+     *
+     * ```json
+     * {
+     *   "components": [
+     *     {
+     *       "purl": "pkg:pypi/django@5.0.6"
+     *     }
+     *   ]
+     * }
+     * ```
+     *
+     * ### Looking up a Maven package:
+     *
+     * ```json
+     * {
+     *   "components": [
+     *     {
+     *       "purl": "pkg:maven/log4j/log4j@1.2.17"
+     *     }
+     *   ]
+     * }
+     * ```
+     *
+     * ### Batch lookup
+     *
+     * ```json
+     * {
+     *   "components": [
+     *     {
+     *       "purl": "pkg:npm/express@4.19.2"
+     *     },
+     *     {
+     *       "purl": "pkg:pypi/django@5.0.6"
+     *     },
+     *     {
+     *       "purl": "pkg:maven/log4j/log4j@1.2.17"
+     *     }
+     *   ]
+     * }
+     * ```
+     *
+     * ### With label and options (query parameters):
+     *
+     * ```
+     * POST /v0/orgs/{org_slug}/purl?labels=production&alerts=true&compact=true
+     * {
+     *   "components": [
+     *     {
+     *       "purl": "pkg:npm/express@4.19.2"
+     *     }
+     *   ]
+     * }
+     * ```
+     *
+     * This endpoint consumes 100 units of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - packages:list
+     */
+    post: operations['batchPackageFetchByOrg']
+  }
+  '/orgs/{org_slug}/fixes': {
+    /**
+     * Fetch fixes for vulnerabilities in a repository or scan
+     * @description Fetches available fixes for vulnerabilities in a repository or scan.
+     * Requires either repo_slug or full_scan_id as well as vulnerability_ids to be provided.
+     * vulnerability_ids can be a comma-separated list of GHSA or CVE IDs, or "*" for all vulnerabilities.
+     *
+     * ## Response Structure
+     *
+     * The response contains a `fixDetails` object where each key is a vulnerability ID (GHSA or CVE) and the value is a discriminated union based on the `type` field.
+     *
+     * ### Common Fields
+     *
+     * All response variants include:
+     * - `type`: Discriminator field (one of: "fixFound", "partialFixFound", "noFixAvailable", "fixNotApplicable", "errorComputingFix")
+     * - `value`: Object containing the variant-specific data
+     *
+     * The `value` object always contains:
+     * - `ghsa`: string | null - The GHSA ID
+     * - `cve`: string | null - The CVE ID (if available)
+     * - `advisoryDetails`: object | null - Advisory details (only if include_details=true)
+     *
+     * ### Response Variants
+     *
+     * **fixFound**: A complete fix is available for all vulnerable packages
+     * - `value.fixDetails.fixes`: Array of fix objects, each containing:
+     *   - `purl`: Package URL to upgrade
+     *   - `fixedVersion`: Version to upgrade to
+     *   - `manifestFiles`: Array of manifest files containing the package
+     *   - `updateType`: "patch" | "minor" | "major" | "unknown"
+     * - `value.fixDetails.responsibleDirectDependencies`: (optional) Map of direct dependencies responsible for the vulnerability
+     *
+     * **partialFixFound**: Fixes available for some but not all vulnerable packages
+     * - Same as fixFound, plus:
+     * - `value.fixDetails.unfixablePurls`: Array of packages that cannot be fixed, each containing:
+     *   - `purl`: Package URL
+     *   - `manifestFiles`: Array of manifest files
+     *
+     * **noFixAvailable**: No fix exists for this vulnerability (no patched version published)
+     *
+     * **fixNotApplicable**: A fix exists but cannot be applied due to version constraints
+     * - `value.vulnerableArtifacts`: Array of vulnerable packages with their manifest files
+     *
+     * **errorComputingFix**: An error occurred while computing fixes
+     * - `value.message`: Error description
+     *
+     * ### Advisory Details (when include_details=true)
+     *
+     * - `title`: string | null
+     * - `description`: string | null
+     * - `cwes`: string[] - CWE identifiers
+     * - `severity`: "LOW" | "MODERATE" | "HIGH" | "CRITICAL"
+     * - `cvssVector`: string | null
+     * - `publishedAt`: string (ISO date)
+     * - `kev`: boolean - Whether it's a Known Exploited Vulnerability
+     * - `epss`: number | null - Exploit Prediction Scoring System score
+     * - `affectedPurls`: Array of affected packages with version ranges
+     *
+     * This endpoint consumes 10 units of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - fixes:list
+     */
+    get: operations['fetch-fixes']
+  }
+  '/orgs/{org_slug}/telemetry/config': {
+    /**
+     * Get Organization Telemetry Config
+     * @description Retrieve the telemetry config of an organization.
+     *
+     * This endpoint consumes 1 unit of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     */
+    get: operations['getOrgTelemetryConfig']
+    /**
+     * Update Telemetry Config
+     * @description Update the telemetry config of an organization.
+     *
+     * This endpoint consumes 1 unit of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - telemetry-policy:update
+     */
+    put: operations['updateOrgTelemetryConfig']
+  }
+  '/orgs/{org_slug}/webhooks': {
+    /**
+     * List all webhooks
+     * @description List all webhooks in the specified organization.
+     *
+     * This endpoint consumes 1 unit of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - webhooks:list
+     */
+    get: operations['getOrgWebhooksList']
+    /**
+     * Create a webhook
+     * @description Create a new webhook. Returns the created webhook details.
+     *
+     * This endpoint consumes 1 unit of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - webhooks:create
+     */
+    post: operations['createOrgWebhook']
+  }
+  '/orgs/{org_slug}/webhooks/{webhook_id}': {
+    /**
+     * Get webhook
+     * @description Get a webhook for the specified organization.
+     *
+     * This endpoint consumes 1 unit of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - webhooks:list
+     */
+    get: operations['getOrgWebhook']
+    /**
+     * Update webhook
+     * @description Update details of an existing webhook.
+     *
+     * This endpoint consumes 1 unit of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - webhooks:update
+     */
+    put: operations['updateOrgWebhook']
+    /**
+     * Delete webhook
+     * @description Delete a webhook. This will stop all future webhook deliveries to the webhook URL.
+     *
+     * This endpoint consumes 1 unit of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - webhooks:delete
+     */
+    delete: operations['deleteOrgWebhook']
+  }
+  '/orgs/{org_slug}/alerts': {
+    /**
+     * List latest alerts (Beta)
+     * @description List latest alerts.
+     *
+     * This endpoint consumes 10 units of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - alerts:list
+     */
+    get: operations['alertsList']
+  }
+  '/orgs/{org_slug}/alert-full-scan-search': {
+    /**
+     * List full scans associated with alert (Beta)
+     * @description List full scans associated with alert.
+     *
+     * This endpoint consumes 10 units of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - alerts:list
+     */
+    get: operations['alertFullScans']
+  }
   '/license-policy': {
     /**
      * License Policy (Beta)
@@ -1502,7 +1837,12 @@ export interface components {
           _type: 'purlError'
           value: components['schemas']['PurlErrorSchema']
         }
-    SocketBatchPURLFetch: {
+      | {
+          /** @enum {string} */
+          _type: 'summary'
+          value: components['schemas']['PurlSummarySchema']
+        }
+    SocketOrgBatchPURLFetch: {
       components: Array<components['schemas']['SocketBatchPURLRequest']>
     }
     SocketArtifact: components['schemas']['SocketPURL'] &
@@ -1679,6 +2019,25 @@ export interface components {
         }
       }>
     }
+    OpenVEXDocumentSchema: {
+      /** @default https://openvex.dev/ns/v0.2.0 */
+      '@context': string
+      /** @default */
+      '@id': string
+      /** @default Socket Security */
+      author: string
+      /** @default */
+      timestamp: string
+      /** @default 1 */
+      version: number
+      statements: Array<components['schemas']['OpenVEXStatementSchema']>
+      /** @default VEX Generator */
+      role?: string
+      /** @default */
+      last_updated?: string
+      /** @default Socket Security VEX Generator */
+      tooling?: string
+    }
     SPDXManifestSchema: {
       /** @default SPDX-2.3 */
       spdxVersion: string
@@ -1884,6 +2243,18 @@ export interface components {
       /** @default */
       inputPurl: string
     }
+    PurlSummarySchema: {
+      /** @default 0 */
+      purl_input: number
+      /** @default 0 */
+      resolved: number
+      errors: {
+        /** @default 0 */
+        purl_malformed: number
+        /** @default 0 */
+        package_not_found: number
+      }
+    }
     SocketBatchPURLRequest: {
       /** @default */
       purl: string
@@ -2281,6 +2652,32 @@ export interface components {
       }>
       components?: Array<components['schemas']['CDXComponentSchema']>
     }
+    OpenVEXStatementSchema: {
+      vulnerability: components['schemas']['OpenVEXVulnerabilitySchema']
+      products: Array<components['schemas']['OpenVEXProductSchema']>
+      /** @default affected */
+      status: string
+      /** @default */
+      '@id'?: string
+      /** @default 0 */
+      version?: number
+      /** @default */
+      timestamp?: string
+      /** @default */
+      last_updated?: string
+      /** @default */
+      supplier?: string
+      /** @default */
+      status_notes?: string
+      /** @default */
+      justification?: string
+      /** @default */
+      impact_statement?: string
+      /** @default */
+      action_statement?: string
+      /** @default */
+      action_statement_timestamp?: string
+    }
     LicenseAllowListElabbed: {
       strings: string[]
       classes: string[]
@@ -2897,6 +3294,19 @@ export interface components {
             usage?: components['schemas']['SocketUsageRef']
           }
         }
+      | {
+          /** @enum {string} */
+          type?: 'tooManyFiles'
+          value?: components['schemas']['SocketIssueBasics'] & {
+            /** @default */
+            description: string
+            props: {
+              /** @default 0 */
+              fileCount: number
+            }
+            usage?: components['schemas']['SocketUsageRef']
+          }
+        }
       | {
           /** @enum {string} */
           type?: 'generic'
@@ -3026,31 +3436,46 @@ export interface components {
         }
       | {
           /** @enum {string} */
-          type?: 'licenseSpdxDisj'
+          type?: 'recentlyPublished'
           value?: components['schemas']['SocketIssueBasics'] & {
             /** @default */
             description: string
             props: {
               /** @default */
-              spdxDisj: string
+              publishedAt: string
               /** @default */
-              licenseScanResult: string
-              violationData: Array<Record<string, never>>
-              warnData: Array<Record<string, never>>
-              monitorData: Array<Record<string, never>>
+              checkedAt: string
             }
             usage?: components['schemas']['SocketUsageRef']
           }
         }
       | {
           /** @enum {string} */
-          type?: 'unsafeCopyright'
+          type?: 'licenseSpdxDisj'
           value?: components['schemas']['SocketIssueBasics'] & {
             /** @default */
             description: string
-            props: Record<string, never>
-            usage?: components['schemas']['SocketUsageRef']
-          }
+            props: {
+              /** @default */
+              spdxDisj: string
+              /** @default */
+              licenseScanResult: string
+              violationData: Array<Record<string, never>>
+              warnData: Array<Record<string, never>>
+              monitorData: Array<Record<string, never>>
+            }
+            usage?: components['schemas']['SocketUsageRef']
+          }
+        }
+      | {
+          /** @enum {string} */
+          type?: 'unsafeCopyright'
+          value?: components['schemas']['SocketIssueBasics'] & {
+            /** @default */
+            description: string
+            props: Record<string, never>
+            usage?: components['schemas']['SocketUsageRef']
+          }
         }
       | {
           /** @enum {string} */
@@ -4229,6 +4654,7 @@ export interface components {
      * @enum {string}
      */
     SocketPURL_Type:
+      | 'alpm'
       | 'apk'
       | 'bitbucket'
       | 'cocoapods'
@@ -4256,8 +4682,10 @@ export interface components {
       | 'pub'
       | 'pypi'
       | 'rpm'
+      | 'socket'
       | 'swid'
       | 'swift'
+      | 'vscode'
       | 'unknown'
     /**
      * @default low
@@ -4303,6 +4731,22 @@ export interface components {
       /** @description Reachability analysis results for each vulnerability */
       results: Array<components['schemas']['ReachabilityResultItem']>
     }
+    OpenVEXVulnerabilitySchema: {
+      /** @default */
+      name: string
+      /** @default */
+      '@id'?: string
+      /** @default */
+      description?: string
+      aliases?: string[]
+    }
+    OpenVEXProductSchema: {
+      /** @default */
+      '@id': string
+      identifiers?: components['schemas']['OpenVEXIdentifiersSchema']
+      hashes?: components['schemas']['OpenVEXHashesSchema']
+      subcomponents?: Array<components['schemas']['OpenVEXComponentSchema']>
+    }
     SocketIssueBasics: {
       severity: components['schemas']['SocketIssueSeverity']
       category: components['schemas']['SocketCategory']
@@ -4358,6 +4802,46 @@ export interface components {
        */
       subprojectPath?: string
     }
+    OpenVEXIdentifiersSchema: {
+      /** @default */
+      purl?: string
+      /** @default */
+      cpe23?: string
+      /** @default */
+      cpe22?: string
+    }
+    OpenVEXHashesSchema: {
+      /** @default */
+      md5?: string
+      /** @default */
+      sha1?: string
+      /** @default */
+      'sha-256'?: string
+      /** @default */
+      'sha-384'?: string
+      /** @default */
+      'sha-512'?: string
+      /** @default */
+      'sha3-224'?: string
+      /** @default */
+      'sha3-256'?: string
+      /** @default */
+      'sha3-384'?: string
+      /** @default */
+      'sha3-512'?: string
+      /** @default */
+      'blake2s-256'?: string
+      /** @default */
+      'blake2b-256'?: string
+      /** @default */
+      'blake2b-512'?: string
+    }
+    OpenVEXComponentSchema: {
+      /** @default */
+      '@id'?: string
+      identifiers?: components['schemas']['OpenVEXIdentifiersSchema']
+      hashes?: components['schemas']['OpenVEXHashesSchema']
+    }
     SocketRefList: Array<components['schemas']['SocketRef']>
     SocketRefFile: {
       /** @default */
@@ -4627,6 +5111,19 @@ export interface components {
         }
       }
     }
+    /** @description Resource already exists */
+    SocketConflict: {
+      content: {
+        'application/json': {
+          error: {
+            /** @default */
+            message: string
+            /** @default null */
+            details: Record<string, unknown> | null
+          }
+        }
+      }
+    }
     /** @description Gone */
     SocketGone: {
       content: {
@@ -4654,12 +5151,17 @@ export type external = Record<string, never>
 export interface operations {
   /**
    * Get Packages by PURL
-   * @description Batch retrieval of package metadata and alerts by PURL strings. Compatible witch CycloneDX reports.
+   * @deprecated
+   * @description **This endpoint is deprecated.** Deprecated since 2026-01-05. It will be removed on 2026-07-30.
+   *
+   * Batch retrieval of package metadata and alerts by PURL strings. Compatible with CycloneDX reports.
    *
    * Package URLs (PURLs) are an ecosystem agnostic way to identify packages.
    * CycloneDX SBOMs use the purl format to identify components.
    * This endpoint supports fetching metadata and alerts for multiple packages at once by passing an array of purl strings, or by passing an entire CycloneDX report.
    *
+   * **Note:** This endpoint has a batch size limit (default: 1024 PURLs per request). Requests exceeding this limit will return a 400 Bad Request error.
+   *
    * More information on purl and CycloneDX:
    *
    * - [`purl` Spec](https://github.com/package-url/purl-spec)
@@ -4736,7 +5238,7 @@ export interface operations {
         alerts?: boolean
         /** @description Include only alerts with comma separated actions defined by security policy. */
         actions?: Array<'error' | 'monitor' | 'warn' | 'ignore'>
-        /** @description Compact metadata. */
+        /** @description Compact metadata. When enabled, excludes metadata fields like author, scores, size, dependencies, and manifest files. Always includes: id, type, name, version, release, namespace, subpath, alerts, and alertPriorities. */
         compact?: boolean
         /** @description Include only fixable alerts. */
         fixable?: boolean
@@ -4746,11 +5248,15 @@ export interface operations {
         licensedetails?: boolean
         /** @description Return errors found with handling PURLs as error objects in the stream. */
         purlErrors?: boolean
+        /** @description Return only cached results, do not attempt to scan new artifacts or rescan stale results. */
+        cachedResultsOnly?: boolean
+        /** @description Include a summary object at the end of the stream with counts of malformed, resolved, and not found PURLs. */
+        summary?: boolean
       }
     }
     requestBody?: {
       content: {
-        'application/json': components['schemas']['SocketBatchPURLFetch']
+        'application/json': components['schemas']['SocketOrgBatchPURLFetch']
       }
     }
     responses: {
@@ -5000,7 +5506,7 @@ export interface operations {
    *
    * To get a list of supported filetypes that can be uploaded in a full-scan, see the [Get supported file types](/reference/getsupportedfiles) endpoint.
    *
-   * The maximum number of files you can upload at a time is 5000 and each file can be no bigger than 67 MB.
+   * The maximum number of files you can upload at a time is 5000 and each file can be no bigger than 268 MB.
    *
    * **Query Parameters:**
    * - `scan_type` (optional): The type of scan to perform. Defaults to 'socket'. Must be 32 characters or less. Used for categorizing multiple SBOM heads per repository branch.
@@ -5025,10 +5531,16 @@ export interface operations {
         commit_hash?: string
         /** @description The pull request number to associate the full-scan with. */
         pull_request?: number
-        /** @description The committers to associate the full-scan with. Set query more than once to set multiple. */
+        /** @description The committers to associate with the full-scan. Set query more than once to set multiple. */
         committers?: string
         /** @description The integration type to associate the full-scan with. Defaults to "Api" if omitted. */
-        integration_type?: 'api' | 'github' | 'gitlab' | 'bitbucket' | 'azure'
+        integration_type?:
+          | 'api'
+          | 'github'
+          | 'gitlab'
+          | 'bitbucket'
+          | 'azure'
+          | 'web'
         /** @description The integration org slug to associate the full-scan with. If omitted, the Socket org name will be used. This is used to generate links and badges. */
         integration_org_slug?: string
         /** @description Set the default branch of the repository to the branch of this full-scan. A branch name is required with this option. */
@@ -5138,6 +5650,8 @@ export interface operations {
           | Array<'component' | 'formula'>
         /** @description Include license details in the response. This can increase the response size significantly. */
         include_license_details: boolean
+        /** @description Return cached immutable scan results. When enabled and results are cached, returns the pre-computed scan. When results are not yet cached, returns 202 Accepted and enqueues a background job. */
+        cached?: boolean
       }
       path: {
         /** @description The slug of the organization */
@@ -5153,6 +5667,17 @@ export interface operations {
           'application/x-ndjson': components['schemas']['SocketArtifact']
         }
       }
+      /** @description Scan is being processed. Poll again later to retrieve results. */
+      202: {
+        content: {
+          'application/json': {
+            /** @default processing */
+            status: string
+            /** @default */
+            id: string
+          }
+        }
+      }
       400: components['responses']['SocketBadRequest']
       401: components['responses']['SocketUnauthorized']
       403: components['responses']['SocketForbidden']
@@ -5502,6 +6027,205 @@ export interface operations {
       429: components['responses']['SocketTooManyRequestsResponse']
     }
   }
+  /**
+   * Download full scan files as tarball
+   * @description Download all files associated with a full scan in tar format.
+   *
+   * This endpoint consumes 1 unit of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - full-scans:list
+   */
+  downloadOrgFullScanFilesAsTar: {
+    parameters: {
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+        /** @description The ID of the full scan */
+        full_scan_id: string
+      }
+    }
+    responses: {
+      /** @description Tar archive of full scan files */
+      200: {
+        content: {
+          'application/x-tar': unknown
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
+  /**
+   * Create full scan from archive
+   * @description Create a full scan by uploading one or more archives. Supported archive formats include **.tar**, **.tar.gz/.tgz**, and **.zip**.
+   *
+   * Each uploaded archive is extracted server-side and any supported manifest files (like package.json, package-lock.json, pnpm-lock.yaml, etc.) are ingested for the scan. If you upload multiple archives in a single request, the manifests from every archive are merged into one full scan. The response includes any files that were ignored.
+   *
+   * The maximum combined number of files extracted from your upload is 5000 and each extracted file can be no bigger than 268 MB.
+   *
+   * This endpoint consumes 1 unit of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - full-scans:create
+   */
+  CreateOrgFullScanArchive: {
+    parameters: {
+      query: {
+        /** @description The slug of the repository to associate the full-scan with. */
+        repo: string
+        /** @description The workspace of the repository to associate the full-scan with. */
+        workspace?: string
+        /** @description The branch name to associate the full-scan with. Branch names must follow Git branch name rules: be 1–255 characters long; cannot be exactly @;  cannot begin or end with /, ., or .lock; cannot contain "//", "..", or "@{"; and cannot include control characters, spaces, or any of ~^:?*[. */
+        branch?: string
+        /** @description The commit message to associate the full-scan with. */
+        commit_message?: string
+        /** @description The commit hash to associate the full-scan with. */
+        commit_hash?: string
+        /** @description The pull request number to associate the full-scan with. */
+        pull_request?: number
+        /** @description The committers to associate with the full-scan. Set query more than once to set multiple. */
+        committers?: string
+        /** @description The integration type to associate the full-scan with. Defaults to "Api" if omitted. */
+        integration_type?:
+          | 'api'
+          | 'github'
+          | 'gitlab'
+          | 'bitbucket'
+          | 'azure'
+          | 'web'
+        /** @description The integration org slug to associate the full-scan with. If omitted, the Socket org name will be used. This is used to generate links and badges. */
+        integration_org_slug?: string
+        /** @description Set the default branch of the repository to the branch of this full-scan. A branch name is required with this option. */
+        make_default_branch?: boolean
+        /** @description Designate this full-scan as the latest scan of a given branch. Default branch head scans are included in org alerts. This is only supported on the default branch. A branch name is required with this option. */
+        set_as_pending_head?: boolean
+        /** @description Create a temporary full-scan that is not listed in the reports dashboard. Cannot be used when set_as_pending_head=true. */
+        tmp?: boolean
+        /** @description The type of scan to perform. Defaults to 'socket'. Must be 32 characters or less. Used for categorizing multiple SBOM heads per repository branch. */
+        scan_type?: string
+      }
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+      }
+    }
+    requestBody?: {
+      content: {
+        'multipart/form-data': {
+          [key: string]: never
+        }
+      }
+    }
+    responses: {
+      /** @description The details of the created full scan. */
+      201: {
+        content: {
+          'application/json': {
+            /** @default */
+            id?: string
+            /** @default */
+            created_at?: string
+            /** @default */
+            updated_at?: string
+            /** @default */
+            organization_id?: string
+            /** @default */
+            organization_slug?: string
+            /** @default */
+            repository_id?: string
+            /** @default */
+            repository_slug?: string
+            /** @default */
+            branch?: string | null
+            /** @default */
+            commit_message?: string | null
+            /** @default */
+            commit_hash?: string | null
+            /** @default 0 */
+            pull_request?: number | null
+            committers?: string[]
+            /** @default */
+            html_url?: string | null
+            /** @default */
+            api_url?: string | null
+            /** @default */
+            workspace?: string
+            /** @default */
+            repo?: string
+            /** @default */
+            html_report_url?: string
+            /** @default */
+            integration_type?: string | null
+            /** @default */
+            integration_repo_url?: string
+            /** @default */
+            integration_branch_url?: string | null
+            /** @default */
+            integration_commit_url?: string | null
+            /** @default */
+            integration_pull_request_url?: string | null
+            /**
+             * @description The current processing status of the SBOM
+             * @default pending
+             * @enum {string|null}
+             */
+            scan_state?: 'pending' | 'precrawl' | 'resolve' | 'scan' | null
+            unmatchedFiles?: string[]
+          }
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
+  /**
+   * Rescan full scan
+   * @description Create a new full scan by rescanning an existing scan. A "shallow" rescan reapplies the latest policies to the previously cached dependency resolution results. A "deep" rescan reruns dependency resolution and applies the latest policies to the results.
+   *
+   * This endpoint consumes 1 unit of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - full-scans:create
+   */
+  rescanOrgFullScan: {
+    parameters: {
+      query?: {
+        /** @description The rescan mode: "shallow" (default) re-applies policies to cached data, "deep" re-fetches the SBOM stream. */
+        mode?: 'shallow' | 'deep'
+      }
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+        /** @description The ID of the full scan to rescan */
+        full_scan_id: string
+      }
+    }
+    responses: {
+      /** @description Rescan initiated successfully */
+      201: {
+        content: {
+          'application/json': {
+            /** @default The ID of the newly created full scan */
+            id: string
+            /** @default The status of the new scan */
+            status: string
+          }
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
   /**
    * Export CycloneDX SBOM (Beta)
    * @description Export a Socket SBOM as a CycloneDX SBOM
@@ -5565,18 +6289,70 @@ export interface operations {
     }
   }
   /**
-   * Export SPDX SBOM (Beta)
-   * @description Export a Socket SBOM as a SPDX SBOM
+   * Export OpenVEX Document (Beta)
+   * @description Export vulnerability exploitability data as an OpenVEX v0.2.0 document.
    *
-   * Supported ecosystems:
+   * OpenVEX (Vulnerability Exploitability eXchange) documents communicate the
+   * exploitability status of vulnerabilities in software products. This export
+   * includes:
    *
-   * - crates
-   * - go
-   * - maven
-   * - npm
-   * - nuget
-   * - pypi
-   * - rubygems
+   * - **Patch data**: Vulnerabilities fixed by applied Socket patches are marked as "fixed"
+   * - **Reachability analysis**: Code reachability determines if vulnerable code is exploitable:
+   * - Unreachable code → "not_affected" with justification
+   * - Reachable code → "affected"
+   * - Unknown/pending → "under_investigation"
+   *
+   * Each statement in the document represents a single artifact-vulnerability pair
+   * for granular reachability information.
+   *
+   * This endpoint consumes 1 unit of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - report:read
+   */
+  exportOpenVEX: {
+    parameters: {
+      query?: {
+        /** @description The author of the VEX document. Should be an individual or organization. */
+        author?: string
+        /** @description The role of the document author (e.g., "VEX Generator", "Security Team"). */
+        role?: string
+        /** @description Custom IRI for the VEX document. If not provided, a default IRI will be generated. */
+        document_id?: string
+      }
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+        /** @description The full scan OR sbom report ID */
+        id: string
+      }
+    }
+    responses: {
+      /** @description OpenVEX v0.2.0 document */
+      200: {
+        content: {
+          'application/json': components['schemas']['OpenVEXDocumentSchema']
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
+  /**
+   * Export SPDX SBOM (Beta)
+   * @description Export a Socket SBOM as a SPDX SBOM
+   *
+   * Supported ecosystems:
+   *
+   * - crates
+   * - go
+   * - maven
+   * - npm
+   * - nuget
+   * - pypi
+   * - rubygems
    * - spdx
    * - cdx
    *
@@ -5719,6 +6495,8 @@ export interface operations {
         omit_license_details?: boolean
         /** @description Omit unchanged artifacts from the response. When set to true, the unchanged field will be set to null. */
         omit_unchanged?: boolean
+        /** @description Return cached immutable scan results. When enabled and results are cached, returns the pre-computed scan. When results are not yet cached, returns 202 Accepted and enqueues a background job. Note: When cached=true, the omit_license_details parameter is ignored as cached results always includes license details. */
+        cached?: boolean
       }
       path: {
         /** @description The slug of the organization */
@@ -5824,6 +6602,17 @@ export interface operations {
           }
         }
       }
+      /** @description Scan is being processed. Poll again later to retrieve results. */
+      202: {
+        content: {
+          'application/json': {
+            /** @default processing */
+            status: string
+            /** @default */
+            id: string
+          }
+        }
+      }
       400: components['responses']['SocketBadRequest']
       401: components['responses']['SocketUnauthorized']
       403: components['responses']['SocketForbidden']
@@ -5995,7 +6784,7 @@ export interface operations {
    * Returns metadata about the diff scan. Once the diff scan is created, fetch the diff scan from
    * the [api_url](/reference/getDiffScanById) URL to get the contents of the diff.
    *
-   * The maximum number of files you can upload at a time is 5000 and each file can be no bigger than 67 MB.
+   * The maximum number of files you can upload at a time is 5000 and each file can be no bigger than 268 MB.
    *
    * This endpoint consumes 1 unit of your quota.
    *
@@ -6022,7 +6811,13 @@ export interface operations {
         /** @description The committers to associate the new full-scan with. Set query more than once to set multiple committers. */
         committers?: string
         /** @description The integration type to associate the new full-scan with. Defaults to "api" if omitted. */
-        integration_type?: 'api' | 'github' | 'gitlab' | 'bitbucket' | 'azure'
+        integration_type?:
+          | 'api'
+          | 'github'
+          | 'gitlab'
+          | 'bitbucket'
+          | 'azure'
+          | 'web'
         /** @description The integration org slug to associate the new full-scan with. If omitted, the Socket org name will be used. This is used to generate links and badges. */
         integration_org_slug?: string
         /** @description Set to true when running a diff between a merged commit and its parent commit in the same branch. Set to false when running diffs in an open PR between unmerged commits. */
@@ -6137,6 +6932,7 @@ export interface operations {
       401: components['responses']['SocketUnauthorized']
       403: components['responses']['SocketForbidden']
       404: components['responses']['SocketNotFoundResponse']
+      409: components['responses']['SocketConflict']
       429: components['responses']['SocketTooManyRequestsResponse']
     }
   }
@@ -6263,6 +7059,7 @@ export interface operations {
       401: components['responses']['SocketUnauthorized']
       403: components['responses']['SocketForbidden']
       404: components['responses']['SocketNotFoundResponse']
+      409: components['responses']['SocketConflict']
       429: components['responses']['SocketTooManyRequestsResponse']
     }
   }
@@ -7544,6 +8341,13 @@ export interface operations {
                  */
                 action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
               }
+              tooManyFiles?: {
+                /**
+                 * @description The action to take for tooManyFiles issues.
+                 * @enum {string}
+                 */
+                action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
+              }
               generic?: {
                 /**
                  * @description The action to take for generic issues.
@@ -7600,6 +8404,13 @@ export interface operations {
                  */
                 action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
               }
+              recentlyPublished?: {
+                /**
+                 * @description The action to take for recentlyPublished issues.
+                 * @enum {string}
+                 */
+                action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
+              }
               licenseSpdxDisj?: {
                 /**
                  * @description The action to take for licenseSpdxDisj issues.
@@ -8423,6 +9234,13 @@ export interface operations {
                */
               action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
             }
+            tooManyFiles?: {
+              /**
+               * @description The action to take for tooManyFiles issues.
+               * @enum {string}
+               */
+              action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
+            }
             generic?: {
               /**
                * @description The action to take for generic issues.
@@ -8479,6 +9297,13 @@ export interface operations {
                */
               action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
             }
+            recentlyPublished?: {
+              /**
+               * @description The action to take for recentlyPublished issues.
+               * @enum {string}
+               */
+              action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
+            }
             licenseSpdxDisj?: {
               /**
                * @description The action to take for licenseSpdxDisj issues.
@@ -9456,6 +10281,13 @@ export interface operations {
                  */
                 action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
               }
+              tooManyFiles?: {
+                /**
+                 * @description The action to take for tooManyFiles issues.
+                 * @enum {string}
+                 */
+                action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
+              }
               generic?: {
                 /**
                  * @description The action to take for generic issues.
@@ -9512,6 +10344,13 @@ export interface operations {
                  */
                 action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
               }
+              recentlyPublished?: {
+                /**
+                 * @description The action to take for recentlyPublished issues.
+                 * @enum {string}
+                 */
+                action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
+              }
               licenseSpdxDisj?: {
                 /**
                  * @description The action to take for licenseSpdxDisj issues.
@@ -10328,6 +11167,13 @@ export interface operations {
                */
               action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
             }
+            tooManyFiles?: {
+              /**
+               * @description The action to take for tooManyFiles issues.
+               * @enum {string}
+               */
+              action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
+            }
             generic?: {
               /**
                * @description The action to take for generic issues.
@@ -10384,6 +11230,13 @@ export interface operations {
                */
               action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
             }
+            recentlyPublished?: {
+              /**
+               * @description The action to take for recentlyPublished issues.
+               * @enum {string}
+               */
+              action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
+            }
             licenseSpdxDisj?: {
               /**
                * @description The action to take for licenseSpdxDisj issues.
@@ -11169,6 +12022,13 @@ export interface operations {
                  */
                 action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
               }
+              tooManyFiles?: {
+                /**
+                 * @description The action to take for tooManyFiles issues.
+                 * @enum {string}
+                 */
+                action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
+              }
               generic?: {
                 /**
                  * @description The action to take for generic issues.
@@ -11225,6 +12085,13 @@ export interface operations {
                  */
                 action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
               }
+              recentlyPublished?: {
+                /**
+                 * @description The action to take for recentlyPublished issues.
+                 * @enum {string}
+                 */
+                action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
+              }
               licenseSpdxDisj?: {
                 /**
                  * @description The action to take for licenseSpdxDisj issues.
@@ -12525,34 +13392,6 @@ export interface operations {
         per_page?: number
         /** @description The pagination cursor that was returned as the "endCursor" property in previous request */
         startAfterCursor?: string
-        /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be included */
-        'filters.alertSeverity'?: string
-        /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be excluded */
-        'filters.alertSeverity.notIn'?: string
-        /** @description Comma-separated list of repo slugs that should be included */
-        'filters.repoSlug'?: string
-        /** @description Comma-separated list of repo slugs that should be excluded */
-        'filters.repoSlug.notIn'?: string
-        /** @description Comma-separated list of repo full names that should be included */
-        'filters.repoFullName'?: string
-        /** @description Comma-separated list of repo full names that should be excluded */
-        'filters.repoFullName.notIn'?: string
-        /** @description Comma-separated list of repo labels that should be included. Use "" to filter for repositories with no labels. */
-        'filters.repoLabels'?: string
-        /** @description Comma-separated list of repo labels that should be excluded. Use "" to filter for repositories with no labels. */
-        'filters.repoLabels.notIn'?: string
-        /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be included */
-        'filters.alertType'?: string
-        /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be excluded */
-        'filters.alertType.notIn'?: string
-        /** @description Name of artifact */
-        'filters.artifactName'?: string
-        /** @description Name of artifact */
-        'filters.artifactName.notIn'?: string
-        /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be included */
-        'filters.artifactType'?: string
-        /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be excluded */
-        'filters.artifactType.notIn'?: string
         /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be included */
         'filters.alertAction'?: string
         /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be excluded */
@@ -12561,10 +13400,6 @@ export interface operations {
         'filters.alertActionSourceType'?: string
         /** @description Comma-separated list of alert action source types ("fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be excluded */
         'filters.alertActionSourceType.notIn'?: string
-        /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be included */
-        'filters.alertFixType'?: string
-        /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be excluded */
-        'filters.alertFixType.notIn'?: string
         /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be included */
         'filters.alertCategory'?: string
         /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be excluded */
@@ -12585,38 +13420,70 @@ export interface operations {
         'filters.alertCweName'?: string
         /** @description CWE name */
         'filters.alertCweName.notIn'?: string
-        /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be included */
-        'filters.alertReachabilityType'?: string
-        /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be excluded */
-        'filters.alertReachabilityType.notIn'?: string
-        /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be included */
-        'filters.alertReachabilityAnalysisType'?: string
-        /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be excluded */
-        'filters.alertReachabilityAnalysisType.notIn'?: string
-        /** @description Alert priority ("low", "medium", "high", or "critical") */
-        'filters.alertPriority'?: string
-        /** @description Alert priority ("low", "medium", "high", or "critical") */
-        'filters.alertPriority.notIn'?: string
-        /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
-        'filters.alertKEV'?: boolean
-        /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
-        'filters.alertKEV.notIn'?: boolean
         /** @description Alert EPSS ("low", "medium", "high", "critical") */
         'filters.alertEPSS'?: string
         /** @description Alert EPSS ("low", "medium", "high", "critical") */
         'filters.alertEPSS.notIn'?: string
-        /** @description Direct/transitive dependency filter flag */
-        'filters.dependencyDirect'?: boolean
-        /** @description Direct/transitive dependency filter flag */
-        'filters.dependencyDirect.notIn'?: boolean
-        /** @description Development/production dependency filter flag */
-        'filters.dependencyDev'?: boolean
-        /** @description Development/production dependency filter flag */
-        'filters.dependencyDev.notIn'?: boolean
+        /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be included */
+        'filters.alertFixType'?: string
+        /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be excluded */
+        'filters.alertFixType.notIn'?: string
+        /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
+        'filters.alertKEV'?: boolean
+        /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
+        'filters.alertKEV.notIn'?: boolean
+        /** @description Alert priority ("low", "medium", "high", or "critical") */
+        'filters.alertPriority'?: string
+        /** @description Alert priority ("low", "medium", "high", or "critical") */
+        'filters.alertPriority.notIn'?: string
+        /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be included */
+        'filters.alertReachabilityAnalysisType'?: string
+        /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be excluded */
+        'filters.alertReachabilityAnalysisType.notIn'?: string
+        /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be included */
+        'filters.alertReachabilityType'?: string
+        /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be excluded */
+        'filters.alertReachabilityType.notIn'?: string
+        /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be included */
+        'filters.alertSeverity'?: string
+        /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be excluded */
+        'filters.alertSeverity.notIn'?: string
+        /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be included */
+        'filters.alertType'?: string
+        /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be excluded */
+        'filters.alertType.notIn'?: string
+        /** @description Name of artifact */
+        'filters.artifactName'?: string
+        /** @description Name of artifact */
+        'filters.artifactName.notIn'?: string
+        /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be included */
+        'filters.artifactType'?: string
+        /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be excluded */
+        'filters.artifactType.notIn'?: string
         /** @description Dead/reachable dependency filter flag */
         'filters.dependencyDead'?: boolean
         /** @description Dead/reachable dependency filter flag */
         'filters.dependencyDead.notIn'?: boolean
+        /** @description Development/production dependency filter flag */
+        'filters.dependencyDev'?: boolean
+        /** @description Development/production dependency filter flag */
+        'filters.dependencyDev.notIn'?: boolean
+        /** @description Direct/transitive dependency filter flag */
+        'filters.dependencyDirect'?: boolean
+        /** @description Direct/transitive dependency filter flag */
+        'filters.dependencyDirect.notIn'?: boolean
+        /** @description Comma-separated list of repo full names that should be included */
+        'filters.repoFullName'?: string
+        /** @description Comma-separated list of repo full names that should be excluded */
+        'filters.repoFullName.notIn'?: string
+        /** @description Comma-separated list of repo labels that should be included. Use "" to filter for repositories with no labels. */
+        'filters.repoLabels'?: string
+        /** @description Comma-separated list of repo labels that should be excluded. Use "" to filter for repositories with no labels. */
+        'filters.repoLabels.notIn'?: string
+        /** @description Comma-separated list of repo slugs that should be included */
+        'filters.repoSlug'?: string
+        /** @description Comma-separated list of repo slugs that should be excluded */
+        'filters.repoSlug.notIn'?: string
       }
       path: {
         /** @description The slug of the organization */
@@ -12726,54 +13593,92 @@ export interface operations {
               /** @default false */
               includeLatestAlertsOnly: boolean
               filters: {
-                /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be excluded */
-                alertSeverity?: string[]
-                /** @description Comma-separated list of repo slugs that should be excluded */
-                repoSlug?: string[]
-                /** @description Comma-separated list of repo full names that should be excluded */
-                repoFullName?: string[]
-                /** @description Comma-separated list of repo labels that should be excluded. Use "" to filter for repositories with no labels. */
-                repoLabels?: string[]
-                /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be excluded */
-                alertType?: string[]
-                /** @description Name of artifact */
-                artifactName?: string[]
-                /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be excluded */
-                artifactType?: string[]
-                /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be excluded */
+                /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be included */
                 alertAction?: string[]
-                /** @description Comma-separated list of alert action source types ("fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be excluded */
+                /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be excluded */
+                'alertAction.notIn'?: string[]
+                /** @description Comma-separated list of alert action source types ("fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be included */
                 alertActionSourceType?: string[]
-                /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be excluded */
-                alertFixType?: string[]
-                /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be excluded */
+                /** @description Comma-separated list of alert action source types ("fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be excluded */
+                'alertActionSourceType.notIn'?: string[]
+                /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be included */
                 alertCategory?: string[]
+                /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be excluded */
+                'alertCategory.notIn'?: string[]
                 /** @description CVE ID */
                 alertCveId?: string[]
+                /** @description CVE ID */
+                'alertCveId.notIn'?: string[]
                 /** @description CVE title */
                 alertCveTitle?: string[]
+                /** @description CVE title */
+                'alertCveTitle.notIn'?: string[]
                 /** @description CWE ID */
                 alertCweId?: string[]
+                /** @description CWE ID */
+                'alertCweId.notIn'?: string[]
                 /** @description CWE name */
                 alertCweName?: string[]
-                /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be excluded */
-                alertReachabilityType?: string[]
-                /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be excluded */
-                alertReachabilityAnalysisType?: string[]
-                /** @description Alert priority ("low", "medium", "high", or "critical") */
-                alertPriority?: string[]
-                /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
-                alertKEV?: boolean[]
+                /** @description CWE name */
+                'alertCweName.notIn'?: string[]
                 /** @description Alert EPSS ("low", "medium", "high", "critical") */
                 alertEPSS?: string[]
-                /** @description Direct/transitive dependency filter flag */
-                dependencyDirect?: boolean[]
-                /** @description Development/production dependency filter flag */
-                dependencyDev?: boolean[]
-                /** @description Dead/reachable dependency filter flag */
-                dependencyDead?: boolean[]
-              }
-            }
+                /** @description Alert EPSS ("low", "medium", "high", "critical") */
+                'alertEPSS.notIn'?: string[]
+                /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be included */
+                alertFixType?: string[]
+                /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be excluded */
+                'alertFixType.notIn'?: string[]
+                /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
+                alertKEV?: boolean[]
+                /** @description Alert priority ("low", "medium", "high", or "critical") */
+                alertPriority?: string[]
+                /** @description Alert priority ("low", "medium", "high", or "critical") */
+                'alertPriority.notIn'?: string[]
+                /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be included */
+                alertReachabilityAnalysisType?: string[]
+                /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be excluded */
+                'alertReachabilityAnalysisType.notIn'?: string[]
+                /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be included */
+                alertReachabilityType?: string[]
+                /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be excluded */
+                'alertReachabilityType.notIn'?: string[]
+                /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be included */
+                alertSeverity?: string[]
+                /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be excluded */
+                'alertSeverity.notIn'?: string[]
+                /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be included */
+                alertType?: string[]
+                /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be excluded */
+                'alertType.notIn'?: string[]
+                /** @description Name of artifact */
+                artifactName?: string[]
+                /** @description Name of artifact */
+                'artifactName.notIn'?: string[]
+                /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be included */
+                artifactType?: string[]
+                /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be excluded */
+                'artifactType.notIn'?: string[]
+                /** @description Dead/reachable dependency filter flag */
+                dependencyDead?: boolean[]
+                /** @description Development/production dependency filter flag */
+                dependencyDev?: boolean[]
+                /** @description Direct/transitive dependency filter flag */
+                dependencyDirect?: boolean[]
+                /** @description Comma-separated list of repo full names that should be included */
+                repoFullName?: string[]
+                /** @description Comma-separated list of repo full names that should be excluded */
+                'repoFullName.notIn'?: string[]
+                /** @description Comma-separated list of repo labels that should be included. Use "" to filter for repositories with no labels. */
+                repoLabels?: string[]
+                /** @description Comma-separated list of repo labels that should be excluded. Use "" to filter for repositories with no labels. */
+                'repoLabels.notIn'?: string[]
+                /** @description Comma-separated list of repo slugs that should be included */
+                repoSlug?: string[]
+                /** @description Comma-separated list of repo slugs that should be excluded */
+                'repoSlug.notIn'?: string[]
+              }
+            }
           }
         }
       }
@@ -12801,34 +13706,6 @@ export interface operations {
         range?: string
         /** @description Comma-separated list of fields that should be used for count aggregation (allowed: alertSeverity,repoSlug,repoFullName,repoLabels,alertType,artifactType,alertAction,alertActionSourceType,alertFixType,alertCategory,alertCveId,alertCveTitle,alertCweId,alertCweName,alertReachabilityType,alertReachabilityAnalysisType,alertPriority,alertKEV,alertEPSS,dependencyDirect,dependencyDev,dependencyDead) */
         'aggregation.fields'?: string
-        /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be included */
-        'filters.alertSeverity'?: string
-        /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be excluded */
-        'filters.alertSeverity.notIn'?: string
-        /** @description Comma-separated list of repo slugs that should be included */
-        'filters.repoSlug'?: string
-        /** @description Comma-separated list of repo slugs that should be excluded */
-        'filters.repoSlug.notIn'?: string
-        /** @description Comma-separated list of repo full names that should be included */
-        'filters.repoFullName'?: string
-        /** @description Comma-separated list of repo full names that should be excluded */
-        'filters.repoFullName.notIn'?: string
-        /** @description Comma-separated list of repo labels that should be included. Use "" to filter for repositories with no labels. */
-        'filters.repoLabels'?: string
-        /** @description Comma-separated list of repo labels that should be excluded. Use "" to filter for repositories with no labels. */
-        'filters.repoLabels.notIn'?: string
-        /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be included */
-        'filters.alertType'?: string
-        /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be excluded */
-        'filters.alertType.notIn'?: string
-        /** @description Name of artifact */
-        'filters.artifactName'?: string
-        /** @description Name of artifact */
-        'filters.artifactName.notIn'?: string
-        /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be included */
-        'filters.artifactType'?: string
-        /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be excluded */
-        'filters.artifactType.notIn'?: string
         /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be included */
         'filters.alertAction'?: string
         /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be excluded */
@@ -12837,10 +13714,6 @@ export interface operations {
         'filters.alertActionSourceType'?: string
         /** @description Comma-separated list of alert action source types ("fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be excluded */
         'filters.alertActionSourceType.notIn'?: string
-        /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be included */
-        'filters.alertFixType'?: string
-        /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be excluded */
-        'filters.alertFixType.notIn'?: string
         /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be included */
         'filters.alertCategory'?: string
         /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be excluded */
@@ -12861,38 +13734,70 @@ export interface operations {
         'filters.alertCweName'?: string
         /** @description CWE name */
         'filters.alertCweName.notIn'?: string
-        /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be included */
-        'filters.alertReachabilityType'?: string
-        /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be excluded */
-        'filters.alertReachabilityType.notIn'?: string
-        /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be included */
-        'filters.alertReachabilityAnalysisType'?: string
-        /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be excluded */
-        'filters.alertReachabilityAnalysisType.notIn'?: string
-        /** @description Alert priority ("low", "medium", "high", or "critical") */
-        'filters.alertPriority'?: string
-        /** @description Alert priority ("low", "medium", "high", or "critical") */
-        'filters.alertPriority.notIn'?: string
-        /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
-        'filters.alertKEV'?: boolean
-        /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
-        'filters.alertKEV.notIn'?: boolean
         /** @description Alert EPSS ("low", "medium", "high", "critical") */
         'filters.alertEPSS'?: string
         /** @description Alert EPSS ("low", "medium", "high", "critical") */
         'filters.alertEPSS.notIn'?: string
-        /** @description Direct/transitive dependency filter flag */
-        'filters.dependencyDirect'?: boolean
-        /** @description Direct/transitive dependency filter flag */
-        'filters.dependencyDirect.notIn'?: boolean
-        /** @description Development/production dependency filter flag */
-        'filters.dependencyDev'?: boolean
-        /** @description Development/production dependency filter flag */
-        'filters.dependencyDev.notIn'?: boolean
+        /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be included */
+        'filters.alertFixType'?: string
+        /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be excluded */
+        'filters.alertFixType.notIn'?: string
+        /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
+        'filters.alertKEV'?: boolean
+        /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
+        'filters.alertKEV.notIn'?: boolean
+        /** @description Alert priority ("low", "medium", "high", or "critical") */
+        'filters.alertPriority'?: string
+        /** @description Alert priority ("low", "medium", "high", or "critical") */
+        'filters.alertPriority.notIn'?: string
+        /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be included */
+        'filters.alertReachabilityAnalysisType'?: string
+        /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be excluded */
+        'filters.alertReachabilityAnalysisType.notIn'?: string
+        /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be included */
+        'filters.alertReachabilityType'?: string
+        /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be excluded */
+        'filters.alertReachabilityType.notIn'?: string
+        /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be included */
+        'filters.alertSeverity'?: string
+        /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be excluded */
+        'filters.alertSeverity.notIn'?: string
+        /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be included */
+        'filters.alertType'?: string
+        /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be excluded */
+        'filters.alertType.notIn'?: string
+        /** @description Name of artifact */
+        'filters.artifactName'?: string
+        /** @description Name of artifact */
+        'filters.artifactName.notIn'?: string
+        /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be included */
+        'filters.artifactType'?: string
+        /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be excluded */
+        'filters.artifactType.notIn'?: string
         /** @description Dead/reachable dependency filter flag */
         'filters.dependencyDead'?: boolean
         /** @description Dead/reachable dependency filter flag */
         'filters.dependencyDead.notIn'?: boolean
+        /** @description Development/production dependency filter flag */
+        'filters.dependencyDev'?: boolean
+        /** @description Development/production dependency filter flag */
+        'filters.dependencyDev.notIn'?: boolean
+        /** @description Direct/transitive dependency filter flag */
+        'filters.dependencyDirect'?: boolean
+        /** @description Direct/transitive dependency filter flag */
+        'filters.dependencyDirect.notIn'?: boolean
+        /** @description Comma-separated list of repo full names that should be included */
+        'filters.repoFullName'?: string
+        /** @description Comma-separated list of repo full names that should be excluded */
+        'filters.repoFullName.notIn'?: string
+        /** @description Comma-separated list of repo labels that should be included. Use "" to filter for repositories with no labels. */
+        'filters.repoLabels'?: string
+        /** @description Comma-separated list of repo labels that should be excluded. Use "" to filter for repositories with no labels. */
+        'filters.repoLabels.notIn'?: string
+        /** @description Comma-separated list of repo slugs that should be included */
+        'filters.repoSlug'?: string
+        /** @description Comma-separated list of repo slugs that should be excluded */
+        'filters.repoSlug.notIn'?: string
       }
       path: {
         /** @description The slug of the organization */
@@ -12918,52 +13823,90 @@ export interface operations {
                 groups: string[][]
               }
               filters: {
-                /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be excluded */
-                alertSeverity?: string[]
-                /** @description Comma-separated list of repo slugs that should be excluded */
-                repoSlug?: string[]
-                /** @description Comma-separated list of repo full names that should be excluded */
-                repoFullName?: string[]
-                /** @description Comma-separated list of repo labels that should be excluded. Use "" to filter for repositories with no labels. */
-                repoLabels?: string[]
-                /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be excluded */
-                alertType?: string[]
-                /** @description Name of artifact */
-                artifactName?: string[]
-                /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be excluded */
-                artifactType?: string[]
-                /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be excluded */
+                /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be included */
                 alertAction?: string[]
-                /** @description Comma-separated list of alert action source types ("fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be excluded */
+                /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be excluded */
+                'alertAction.notIn'?: string[]
+                /** @description Comma-separated list of alert action source types ("fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be included */
                 alertActionSourceType?: string[]
-                /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be excluded */
-                alertFixType?: string[]
-                /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be excluded */
+                /** @description Comma-separated list of alert action source types ("fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be excluded */
+                'alertActionSourceType.notIn'?: string[]
+                /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be included */
                 alertCategory?: string[]
+                /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be excluded */
+                'alertCategory.notIn'?: string[]
                 /** @description CVE ID */
                 alertCveId?: string[]
+                /** @description CVE ID */
+                'alertCveId.notIn'?: string[]
                 /** @description CVE title */
                 alertCveTitle?: string[]
+                /** @description CVE title */
+                'alertCveTitle.notIn'?: string[]
                 /** @description CWE ID */
                 alertCweId?: string[]
+                /** @description CWE ID */
+                'alertCweId.notIn'?: string[]
                 /** @description CWE name */
                 alertCweName?: string[]
-                /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be excluded */
-                alertReachabilityType?: string[]
-                /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be excluded */
-                alertReachabilityAnalysisType?: string[]
-                /** @description Alert priority ("low", "medium", "high", or "critical") */
-                alertPriority?: string[]
-                /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
-                alertKEV?: boolean[]
+                /** @description CWE name */
+                'alertCweName.notIn'?: string[]
                 /** @description Alert EPSS ("low", "medium", "high", "critical") */
                 alertEPSS?: string[]
-                /** @description Direct/transitive dependency filter flag */
-                dependencyDirect?: boolean[]
-                /** @description Development/production dependency filter flag */
-                dependencyDev?: boolean[]
+                /** @description Alert EPSS ("low", "medium", "high", "critical") */
+                'alertEPSS.notIn'?: string[]
+                /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be included */
+                alertFixType?: string[]
+                /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be excluded */
+                'alertFixType.notIn'?: string[]
+                /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
+                alertKEV?: boolean[]
+                /** @description Alert priority ("low", "medium", "high", or "critical") */
+                alertPriority?: string[]
+                /** @description Alert priority ("low", "medium", "high", or "critical") */
+                'alertPriority.notIn'?: string[]
+                /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be included */
+                alertReachabilityAnalysisType?: string[]
+                /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be excluded */
+                'alertReachabilityAnalysisType.notIn'?: string[]
+                /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be included */
+                alertReachabilityType?: string[]
+                /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be excluded */
+                'alertReachabilityType.notIn'?: string[]
+                /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be included */
+                alertSeverity?: string[]
+                /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be excluded */
+                'alertSeverity.notIn'?: string[]
+                /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be included */
+                alertType?: string[]
+                /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be excluded */
+                'alertType.notIn'?: string[]
+                /** @description Name of artifact */
+                artifactName?: string[]
+                /** @description Name of artifact */
+                'artifactName.notIn'?: string[]
+                /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be included */
+                artifactType?: string[]
+                /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be excluded */
+                'artifactType.notIn'?: string[]
                 /** @description Dead/reachable dependency filter flag */
                 dependencyDead?: boolean[]
+                /** @description Development/production dependency filter flag */
+                dependencyDev?: boolean[]
+                /** @description Direct/transitive dependency filter flag */
+                dependencyDirect?: boolean[]
+                /** @description Comma-separated list of repo full names that should be included */
+                repoFullName?: string[]
+                /** @description Comma-separated list of repo full names that should be excluded */
+                'repoFullName.notIn'?: string[]
+                /** @description Comma-separated list of repo labels that should be included. Use "" to filter for repositories with no labels. */
+                repoLabels?: string[]
+                /** @description Comma-separated list of repo labels that should be excluded. Use "" to filter for repositories with no labels. */
+                'repoLabels.notIn'?: string[]
+                /** @description Comma-separated list of repo slugs that should be included */
+                repoSlug?: string[]
+                /** @description Comma-separated list of repo slugs that should be excluded */
+                'repoSlug.notIn'?: string[]
               }
             }
             items: Array<{
@@ -13326,8 +14269,10 @@ export interface operations {
           | 'ChangeMemberRole'
           | 'ChangePlanSubscriptionSeats'
           | 'CreateApiToken'
+          | 'CreateArtifact'
           | 'CreateLabel'
           | 'CreateWebhook'
+          | 'DeleteApiToken'
           | 'DeleteFullScan'
           | 'DeleteLabel'
           | 'DeleteLabelSetting'
@@ -13337,6 +14282,9 @@ export interface operations {
           | 'DisassociateLabel'
           | 'DowngradeOrganizationPlan'
           | 'JoinOrganization'
+          | 'MemberAdded'
+          | 'MemberRemoved'
+          | 'MemberRoleChanged'
           | 'RemoveLicenseOverlay'
           | 'RemoveMember'
           | 'ResetInvitationLink'
@@ -13439,6 +14387,8 @@ export interface operations {
         per_page?: number
         /** @description The token specifying which page to return. */
         page?: number
+        /** @description Whether to include token values in response. Use "omit" to exclude tokens entirely. */
+        token_values?: 'include' | 'omit'
       }
       path: {
         /** @description The slug of the organization */
@@ -13451,24 +14401,53 @@ export interface operations {
         content: {
           'application/json': {
             tokens: Array<{
+              /** @description List of committers associated with this API Token */
               committers: {
-                /** @default */
+                /**
+                 * @description Email address of the committer
+                 * @default
+                 */
                 email?: string
                 /**
+                 * @description The source control provider for the committer
                  * @default api
                  * @enum {string}
                  */
                 provider?: 'api' | 'azure' | 'bitbucket' | 'github' | 'gitlab'
-                /** @default */
+                /**
+                 * @description Login name on the provider platform
+                 * @default
+                 */
                 providerLoginName?: string
-                /** @default */
+                /**
+                 * @description User ID on the provider platform
+                 * @default
+                 */
                 providerUserId?: string
               }[]
+              /**
+               * Format: uuid
+               * @description ID of the Socket user who created the API Token
+               * @default
+               */
+              created_by: string | null
               /**
                * Format: date
+               * @description Timestamp when the API Token was created
                * @default
                */
               created_at: string
+              /**
+               * Format: uuid
+               * @description The stable group UUID that remains constant across token rotations
+               * @default
+               */
+              group_uuid: string
+              /**
+               * @description SRI-format hash of the token (e.g., sha512-base64hash). Null for tokens created before hash column was added.
+               * @default
+               */
+              hash: string | null
               /**
                * @description The ID of the API Token
                * @default
@@ -13476,16 +14455,21 @@ export interface operations {
               id: string
               /**
                * Format: date
+               * @description Timestamp when the API Token was last used
                * @default
                */
               last_used_at: string
-              /** @default 1000 */
+              /**
+               * @description Maximum number of API calls allowed per month
+               * @default 1000
+               */
               max_quota: number
               /**
                * @description Name for the API Token
                * @default api token
                */
               name: string | null
+              /** @description List of scopes granted to the API Token */
               scopes: (
                 | 'alerts'
                 | 'alerts:list'
@@ -13501,6 +14485,8 @@ export interface operations {
                 | 'dependencies'
                 | 'dependencies:list'
                 | 'dependencies:trend'
+                | 'fixes'
+                | 'fixes:list'
                 | 'full-scans'
                 | 'full-scans:list'
                 | 'full-scans:create'
@@ -13547,17 +14533,28 @@ export interface operations {
                 | 'security-policy:read'
                 | 'socket-basics'
                 | 'socket-basics:read'
+                | 'telemetry-policy'
+                | 'telemetry-policy:update'
                 | 'threat-feed'
                 | 'threat-feed:list'
                 | 'triage'
                 | 'triage:alerts-list'
                 | 'triage:alerts-update'
+                | 'uploaded-artifacts'
+                | 'uploaded-artifacts:create'
+                | 'uploaded-artifacts:list'
+                | 'webhooks'
+                | 'webhooks:create'
+                | 'webhooks:list'
+                | 'webhooks:update'
+                | 'webhooks:delete'
+                | '*'
               )[]
               /**
-               * @description The obfuscated token of the API Token
+               * @description The token of the API Token (redacted or omitted)
                * @default
                */
-              token: string
+              token: string | null
               /**
                * @description The visibility of the API Token. Warning: this field is deprecated and will be removed in the future.
                * @default organization
@@ -13595,8 +14592,12 @@ export interface operations {
     requestBody?: {
       content: {
         'application/json': {
-          /** @default 1000 */
+          /**
+           * @description Maximum number of API calls allowed per month
+           * @default 1000
+           */
           max_quota: number
+          /** @description List of scopes granted to the API Token */
           scopes: Array<
             | 'alerts'
             | 'alerts:list'
@@ -13612,6 +14613,8 @@ export interface operations {
             | 'dependencies'
             | 'dependencies:list'
             | 'dependencies:trend'
+            | 'fixes'
+            | 'fixes:list'
             | 'full-scans'
             | 'full-scans:list'
             | 'full-scans:create'
@@ -13658,11 +14661,22 @@ export interface operations {
             | 'security-policy:read'
             | 'socket-basics'
             | 'socket-basics:read'
+            | 'telemetry-policy'
+            | 'telemetry-policy:update'
             | 'threat-feed'
             | 'threat-feed:list'
             | 'triage'
             | 'triage:alerts-list'
             | 'triage:alerts-update'
+            | 'uploaded-artifacts'
+            | 'uploaded-artifacts:create'
+            | 'uploaded-artifacts:list'
+            | 'webhooks'
+            | 'webhooks:create'
+            | 'webhooks:list'
+            | 'webhooks:update'
+            | 'webhooks:delete'
+            | '*'
           >
           /**
            * @description The visibility of the API Token. Warning: this field is deprecated and will be removed in the future.
@@ -13670,17 +14684,28 @@ export interface operations {
            * @enum {string}
            */
           visibility: 'admin' | 'organization'
+          /** @description Committer information to associate with the API Token */
           committer: {
-            /** @default */
+            /**
+             * @description Email address of the committer
+             * @default
+             */
             email?: string
             /**
+             * @description The source control provider for the committer
              * @default api
              * @enum {string}
              */
             provider?: 'api' | 'azure' | 'bitbucket' | 'github' | 'gitlab'
-            /** @default */
+            /**
+             * @description Login name on the provider platform
+             * @default
+             */
             providerLoginName?: string
-            /** @default */
+            /**
+             * @description User ID on the provider platform
+             * @default
+             */
             providerUserId?: string
           }
           /**
@@ -13688,16 +14713,48 @@ export interface operations {
            * @default api token
            */
           name?: string
+          /** @description List of resources this API Token can access. Tokens with resource grants can only access a subset of routes that support this feature. */
+          resources?: Array<{
+            /**
+             * @description Slug of the organization to grant access to
+             * @default
+             */
+            organizationSlug: string
+            /**
+             * @description Slug of the repository to grant access to
+             * @default
+             */
+            repositorySlug: string
+            /**
+             * @description Workspace slug containing the specified repo
+             * @default
+             */
+            workspace?: string
+          }>
         }
       }
     }
     responses: {
-      /** @description The newly created api token. */
+      /** @description The newly created api token with its stable UUID and hash. */
       200: {
         content: {
           'application/json': {
+            /**
+             * Format: uuid
+             * @description ID of the Socket user who created the API Token
+             * @default
+             */
+            created_by: string | null
+            /**
+             * Format: uuid
+             * @description The stable group UUID that remains constant across token rotations
+             * @default
+             */
+            group_uuid: string
             /** @default */
             token: string
+            /** @default */
+            hash: string
           }
         }
       }
@@ -13726,8 +14783,12 @@ export interface operations {
     requestBody?: {
       content: {
         'application/json': {
-          /** @default 1000 */
+          /**
+           * @description Maximum number of API calls allowed per hour
+           * @default 1000
+           */
           max_quota: number
+          /** @description List of scopes granted to the API Token */
           scopes: Array<
             | 'alerts'
             | 'alerts:list'
@@ -13743,6 +14804,8 @@ export interface operations {
             | 'dependencies'
             | 'dependencies:list'
             | 'dependencies:trend'
+            | 'fixes'
+            | 'fixes:list'
             | 'full-scans'
             | 'full-scans:list'
             | 'full-scans:create'
@@ -13789,31 +14852,51 @@ export interface operations {
             | 'security-policy:read'
             | 'socket-basics'
             | 'socket-basics:read'
+            | 'telemetry-policy'
+            | 'telemetry-policy:update'
             | 'threat-feed'
             | 'threat-feed:list'
             | 'triage'
             | 'triage:alerts-list'
             | 'triage:alerts-update'
+            | 'uploaded-artifacts'
+            | 'uploaded-artifacts:create'
+            | 'uploaded-artifacts:list'
+            | 'webhooks'
+            | 'webhooks:create'
+            | 'webhooks:list'
+            | 'webhooks:update'
+            | 'webhooks:delete'
+            | '*'
           >
-          /** @default */
-          token: string
           /**
            * @description The visibility of the API Token. Warning: this field is deprecated and will be removed in the future.
            * @default organization
            * @enum {string}
            */
           visibility: 'admin' | 'organization'
+          /** @description Committer information to associate with the API Token */
           committer: {
-            /** @default */
+            /**
+             * @description Email address of the committer
+             * @default
+             */
             email?: string
             /**
+             * @description The source control provider for the committer
              * @default api
              * @enum {string}
              */
             provider?: 'api' | 'azure' | 'bitbucket' | 'github' | 'gitlab'
-            /** @default */
+            /**
+             * @description Login name on the provider platform
+             * @default
+             */
             providerLoginName?: string
-            /** @default */
+            /**
+             * @description User ID on the provider platform
+             * @default
+             */
             providerUserId?: string
           }
           /**
@@ -13821,6 +14904,27 @@ export interface operations {
            * @default api token
            */
           name?: string
+          /**
+           * Format: uuid
+           * @description The stable group UUID to update (provide uuid, id, token, or hash. May provide uuid+hash together for validation)
+           * @default
+           */
+          uuid?: string
+          /**
+           * @description The API token ID to update (provide uuid, id, token, or hash)
+           * @default
+           */
+          id?: string
+          /**
+           * @description The API token to update (provide uuid, id, token, or hash)
+           * @default
+           */
+          token?: string
+          /**
+           * @description The API token hash to update (provide uuid, id, token, or hash)
+           * @default
+           */
+          hash?: string
         }
       }
     }
@@ -13829,8 +14933,11 @@ export interface operations {
       200: {
         content: {
           'application/json': {
-            /** @default */
-            token: string
+            /**
+             * @description SRI-format hash of the API token (e.g., sha512-base64hash)
+             * @default
+             */
+            hash: string
           }
         }
       }
@@ -13855,22 +14962,49 @@ export interface operations {
         org_slug: string
       }
     }
-    /** @description The API Token to rotate */
+    /** @description The API Token identifier to rotate. Provide uuid (recommended), token, or hash. May provide uuid+hash together for validation. */
     requestBody?: {
       content: {
         'application/json': {
+          /**
+           * Format: uuid
+           * @description The stable group UUID of the API token to rotate
+           * @default
+           */
+          uuid?: string
+          /** @default */
+          token?: string
           /** @default */
-          token: string
+          hash?: string
         }
       }
     }
     responses: {
-      /** @description The replacement API Token */
+      /** @description The replacement API Token with its stable UUID, new token value, and hash */
       200: {
         content: {
           'application/json': {
+            /**
+             * @description The database ID of the new API token
+             * @default
+             */
+            id: string
+            /**
+             * Format: uuid
+             * @description The stable group UUID (unchanged after rotation)
+             * @default
+             */
+            group_uuid: string
+            /**
+             * Format: uuid
+             * @description ID of the Socket user who created the API Token
+             * @default
+             */
+            created_by: string | null
             /** @default */
             token: string
+            /** @default */
+            hash: string
           }
         }
       }
@@ -13895,12 +15029,20 @@ export interface operations {
         org_slug: string
       }
     }
-    /** @description The token to revoke. */
+    /** @description The API token identifier to revoke. Provide uuid (recommended), token, or hash. May provide uuid+hash together for validation. */
     requestBody?: {
       content: {
         'application/json': {
+          /**
+           * Format: uuid
+           * @description The stable group UUID of the API token to revoke
+           * @default
+           */
+          uuid?: string
           /** @default */
-          token: string
+          token?: string
+          /** @default */
+          hash?: string
         }
       }
     }
@@ -14012,6 +15154,7 @@ export interface operations {
         ecosystem?:
           | 'github'
           | 'cargo'
+          | 'composer'
           | 'chrome'
           | 'golang'
           | 'huggingface'
@@ -14021,6 +15164,8 @@ export interface operations {
           | 'vscode'
           | 'pypi'
           | 'gem'
+          | 'socket'
+          | 'swift'
       }
     }
     responses: {
@@ -14034,6 +15179,8 @@ export interface operations {
               /** @default */
               updatedAt?: string
               /** @default */
+              publishedAt?: string | null
+              /** @default */
               description?: string
               /** @default 0 */
               id?: number
@@ -14052,6 +15199,11 @@ export interface operations {
                * @default false
                */
               needsHumanReview?: boolean
+              /**
+               * @description Unique threat instance identifier across artifacts
+               * @default 0
+               */
+              threatInstanceId?: number
             }>
             /** @default */
             nextPage: string | null
@@ -14116,6 +15268,7 @@ export interface operations {
         ecosystem?:
           | 'github'
           | 'cargo'
+          | 'composer'
           | 'chrome'
           | 'golang'
           | 'huggingface'
@@ -14125,6 +15278,8 @@ export interface operations {
           | 'vscode'
           | 'pypi'
           | 'gem'
+          | 'socket'
+          | 'swift'
       }
       path: {
         /** @description The slug of the organization */
@@ -14142,6 +15297,8 @@ export interface operations {
               /** @default */
               updatedAt?: string
               /** @default */
+              publishedAt?: string | null
+              /** @default */
               description?: string
               /** @default 0 */
               id?: number
@@ -14160,6 +15317,11 @@ export interface operations {
                * @default false
                */
               needsHumanReview?: boolean
+              /**
+               * @description Unique threat instance identifier across artifacts
+               * @default 0
+               */
+              threatInstanceId?: number
             }>
             /** @default */
             nextPageCursor: string | null
@@ -14173,6 +15335,1300 @@ export interface operations {
       429: components['responses']['SocketTooManyRequestsResponse']
     }
   }
+  /**
+   * Get Packages by PURL (Org Scoped)
+   * @description Batch retrieval of package metadata and alerts by PURL strings for a specific organization. Compatible with CycloneDX reports.
+   *
+   * Package URLs (PURLs) are an ecosystem agnostic way to identify packages.
+   * CycloneDX SBOMs use the purl format to identify components.
+   * This endpoint supports fetching metadata and alerts for multiple packages at once by passing an array of purl strings, or by passing an entire CycloneDX report.
+   *
+   * **Note:** This endpoint has a batch size limit (default: 1024 PURLs per request). Requests exceeding this limit will return a 400 Bad Request error.
+   *
+   * More information on purl and CycloneDX:
+   *
+   * - [`purl` Spec](https://github.com/package-url/purl-spec)
+   * - [CycloneDX Spec](https://cyclonedx.org/specification/overview/#components)
+   *
+   * This endpoint returns the latest available alert data for artifacts in the batch (stale while revalidate).
+   * Actively running analysis will be returned when available on subsequent runs.
+   *
+   * ## Query Parameters
+   *
+   * This endpoint supports all query parameters from `POST /v0/purl` including: `alerts`, `actions`, `compact`, `fixable`, `licenseattrib`, `licensedetails`, `purlErrors`, `cachedResultsOnly`, and `summary`.
+   *
+   * Additionally, you may provide a `labels` query parameter to apply a repository label's security policies. Pass the label slug as the value (e.g., `?labels=production`). Only one label is currently supported.
+   *
+   * ## Examples:
+   *
+   * ### Looking up an npm package:
+   *
+   * ```json
+   * {
+   *   "components": [
+   *     {
+   *       "purl": "pkg:npm/express@4.19.2"
+   *     }
+   *   ]
+   * }
+   * ```
+   *
+   * ### Looking up a PyPi package:
+   *
+   * ```json
+   * {
+   *   "components": [
+   *     {
+   *       "purl": "pkg:pypi/django@5.0.6"
+   *     }
+   *   ]
+   * }
+   * ```
+   *
+   * ### Looking up a Maven package:
+   *
+   * ```json
+   * {
+   *   "components": [
+   *     {
+   *       "purl": "pkg:maven/log4j/log4j@1.2.17"
+   *     }
+   *   ]
+   * }
+   * ```
+   *
+   * ### Batch lookup
+   *
+   * ```json
+   * {
+   *   "components": [
+   *     {
+   *       "purl": "pkg:npm/express@4.19.2"
+   *     },
+   *     {
+   *       "purl": "pkg:pypi/django@5.0.6"
+   *     },
+   *     {
+   *       "purl": "pkg:maven/log4j/log4j@1.2.17"
+   *     }
+   *   ]
+   * }
+   * ```
+   *
+   * ### With label and options (query parameters):
+   *
+   * ```
+   * POST /v0/orgs/{org_slug}/purl?labels=production&alerts=true&compact=true
+   * {
+   *   "components": [
+   *     {
+   *       "purl": "pkg:npm/express@4.19.2"
+   *     }
+   *   ]
+   * }
+   * ```
+   *
+   * This endpoint consumes 100 units of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - packages:list
+   */
+  batchPackageFetchByOrg: {
+    parameters: {
+      query?: {
+        /** @description Repository label slugs to apply policies. Only one label is supported currently; the parameter is an array to allow future support for multiple labels. */
+        labels?: string[]
+        /** @description Include alert metadata. */
+        alerts?: boolean
+        /** @description Include only alerts with comma separated actions defined by security policy. */
+        actions?: Array<'error' | 'monitor' | 'warn' | 'ignore'>
+        /** @description Compact metadata. When enabled, excludes metadata fields like author, scores, size, dependencies, and manifest files. Always includes: id, type, name, version, release, namespace, subpath, alerts, and alertPriorities. */
+        compact?: boolean
+        /** @description Include only fixable alerts. */
+        fixable?: boolean
+        /** @description Include license attribution data, including license text and author information. Maps attribution/license text to a list of data objects to which that attribution info applies. */
+        licenseattrib?: boolean
+        /** @description Include detailed license information, including location and match strength, for each license datum. */
+        licensedetails?: boolean
+        /** @description Return errors found with handling PURLs as error objects in the stream. */
+        purlErrors?: boolean
+        /** @description Return only cached results, do not attempt to scan new artifacts or rescan stale results. */
+        cachedResultsOnly?: boolean
+        /** @description Include a summary object at the end of the stream with counts of malformed, resolved, and not found PURLs. */
+        summary?: boolean
+      }
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+      }
+    }
+    requestBody?: {
+      content: {
+        'application/json': components['schemas']['SocketOrgBatchPURLFetch']
+      }
+    }
+    responses: {
+      /** @description Socket issue lists and scores for all packages, and optional metadata objects */
+      200: {
+        content: {
+          'application/x-ndjson': components['schemas']['BatchPurlStreamSchema']
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
+  /**
+   * Fetch fixes for vulnerabilities in a repository or scan
+   * @description Fetches available fixes for vulnerabilities in a repository or scan.
+   * Requires either repo_slug or full_scan_id as well as vulnerability_ids to be provided.
+   * vulnerability_ids can be a comma-separated list of GHSA or CVE IDs, or "*" for all vulnerabilities.
+   *
+   * ## Response Structure
+   *
+   * The response contains a `fixDetails` object where each key is a vulnerability ID (GHSA or CVE) and the value is a discriminated union based on the `type` field.
+   *
+   * ### Common Fields
+   *
+   * All response variants include:
+   * - `type`: Discriminator field (one of: "fixFound", "partialFixFound", "noFixAvailable", "fixNotApplicable", "errorComputingFix")
+   * - `value`: Object containing the variant-specific data
+   *
+   * The `value` object always contains:
+   * - `ghsa`: string | null - The GHSA ID
+   * - `cve`: string | null - The CVE ID (if available)
+   * - `advisoryDetails`: object | null - Advisory details (only if include_details=true)
+   *
+   * ### Response Variants
+   *
+   * **fixFound**: A complete fix is available for all vulnerable packages
+   * - `value.fixDetails.fixes`: Array of fix objects, each containing:
+   *   - `purl`: Package URL to upgrade
+   *   - `fixedVersion`: Version to upgrade to
+   *   - `manifestFiles`: Array of manifest files containing the package
+   *   - `updateType`: "patch" | "minor" | "major" | "unknown"
+   * - `value.fixDetails.responsibleDirectDependencies`: (optional) Map of direct dependencies responsible for the vulnerability
+   *
+   * **partialFixFound**: Fixes available for some but not all vulnerable packages
+   * - Same as fixFound, plus:
+   * - `value.fixDetails.unfixablePurls`: Array of packages that cannot be fixed, each containing:
+   *   - `purl`: Package URL
+   *   - `manifestFiles`: Array of manifest files
+   *
+   * **noFixAvailable**: No fix exists for this vulnerability (no patched version published)
+   *
+   * **fixNotApplicable**: A fix exists but cannot be applied due to version constraints
+   * - `value.vulnerableArtifacts`: Array of vulnerable packages with their manifest files
+   *
+   * **errorComputingFix**: An error occurred while computing fixes
+   * - `value.message`: Error description
+   *
+   * ### Advisory Details (when include_details=true)
+   *
+   * - `title`: string | null
+   * - `description`: string | null
+   * - `cwes`: string[] - CWE identifiers
+   * - `severity`: "LOW" | "MODERATE" | "HIGH" | "CRITICAL"
+   * - `cvssVector`: string | null
+   * - `publishedAt`: string (ISO date)
+   * - `kev`: boolean - Whether it's a Known Exploited Vulnerability
+   * - `epss`: number | null - Exploit Prediction Scoring System score
+   * - `affectedPurls`: Array of affected packages with version ranges
+   *
+   * This endpoint consumes 10 units of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - fixes:list
+   */
+  'fetch-fixes': {
+    parameters: {
+      query: {
+        /** @description The slug of the repository to fetch fixes for. Computes fixes based on the latest scan on the default branch */
+        repo_slug?: string
+        /** @description The ID of the scan to fetch fixes for */
+        full_scan_id?: string
+        /** @description Comma-separated list of GHSA or CVE IDs, or "*" for all vulnerabilities */
+        vulnerability_ids: string
+        /** @description Whether to allow major version updates in fixes */
+        allow_major_updates: boolean
+        /** @description Minimum release age for fixes packages (e.g., "1h", "2d", "1w"). Higher values reduces risk of installing recently released untested package versions. */
+        minimum_release_age?: string
+        /** @description Whether to include advisory details in the response */
+        include_details?: boolean
+        /** @description Set to include the direct dependencies responsible for introducing the dependency or dependencies with the vulnerability in the response */
+        include_responsible_direct_dependencies?: boolean
+      }
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+      }
+    }
+    responses: {
+      /** @description Fix details for requested vulnerabilities */
+      200: {
+        content: {
+          'application/json': {
+            fixDetails: {
+              [key: string]: Record<string, never>
+            }
+          }
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
+  /**
+   * Get Organization Telemetry Config
+   * @description Retrieve the telemetry config of an organization.
+   *
+   * This endpoint consumes 1 unit of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   */
+  getOrgTelemetryConfig: {
+    parameters: {
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+      }
+    }
+    responses: {
+      /** @description Retrieved telemetry config details */
+      200: {
+        content: {
+          'application/json': {
+            /** @description Telemetry configuration */
+            telemetry: {
+              /**
+               * @description Telemetry enabled
+               * @default false
+               */
+              enabled: boolean
+            }
+          }
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
+  /**
+   * Update Telemetry Config
+   * @description Update the telemetry config of an organization.
+   *
+   * This endpoint consumes 1 unit of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - telemetry-policy:update
+   */
+  updateOrgTelemetryConfig: {
+    parameters: {
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+      }
+    }
+    requestBody?: {
+      content: {
+        'application/json': {
+          /**
+           * @description Telemetry enabled
+           * @default false
+           */
+          enabled?: boolean
+        }
+      }
+    }
+    responses: {
+      /** @description Updated telemetry config details */
+      200: {
+        content: {
+          'application/json': {
+            /** @description Telemetry configuration */
+            telemetry: {
+              /**
+               * @description Telemetry enabled
+               * @default false
+               */
+              enabled: boolean
+            }
+          }
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
+  /**
+   * List all webhooks
+   * @description List all webhooks in the specified organization.
+   *
+   * This endpoint consumes 1 unit of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - webhooks:list
+   */
+  getOrgWebhooksList: {
+    parameters: {
+      query?: {
+        sort?: string
+        direction?: string
+        per_page?: number
+        page?: number
+      }
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+      }
+    }
+    responses: {
+      /** @description List of webhooks */
+      200: {
+        content: {
+          'application/json': {
+            results: Array<{
+              /**
+               * @description The ID of the webhook
+               * @default
+               */
+              id: string
+              /**
+               * @description The creation date of the webhook
+               * @default
+               */
+              created_at: string
+              /**
+               * @description The last update date of the webhook
+               * @default
+               */
+              updated_at: string
+              /**
+               * @description The name of the webhook
+               * @default
+               */
+              name: string
+              /**
+               * @description The description of the webhook
+               * @default
+               */
+              description: string | null
+              /**
+               * @description The URL where webhook events will be sent
+               * @default
+               */
+              url: string
+              /**
+               * @description The signing key used to sign webhook payloads
+               * @default
+               */
+              secret: string | null
+              /** @description Array of event names */
+              events: string[]
+              /**
+               * @description Custom headers to include in webhook requests
+               * @default null
+               */
+              headers: Record<string, unknown> | null
+              filters: {
+                /** @description Array of repository IDs */
+                repositoryIds: string[] | null
+              } | null
+            }>
+            /** @default 0 */
+            nextPage: number | null
+          }
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
+  /**
+   * Create a webhook
+   * @description Create a new webhook. Returns the created webhook details.
+   *
+   * This endpoint consumes 1 unit of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - webhooks:create
+   */
+  createOrgWebhook: {
+    parameters: {
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+      }
+    }
+    requestBody?: {
+      content: {
+        'application/json': {
+          /**
+           * @description The name of the webhook
+           * @default
+           */
+          name: string
+          /**
+           * @description The URL where webhook events will be sent
+           * @default
+           */
+          url: string
+          /**
+           * @description The signing key used to sign webhook payloads
+           * @default
+           */
+          secret: string
+          /** @description Array of event names */
+          events: string[]
+          /**
+           * @description The description of the webhook
+           * @default
+           */
+          description?: string | null
+          /**
+           * @description Custom headers to include in webhook requests
+           * @default null
+           */
+          headers?: Record<string, unknown> | null
+          filters?: {
+            /** @description Array of repository IDs */
+            repositoryIds: string[] | null
+          } | null
+        }
+      }
+    }
+    responses: {
+      /** @description The created webhook */
+      201: {
+        content: {
+          'application/json': {
+            /**
+             * @description The ID of the webhook
+             * @default
+             */
+            id: string
+            /**
+             * @description The creation date of the webhook
+             * @default
+             */
+            created_at: string
+            /**
+             * @description The last update date of the webhook
+             * @default
+             */
+            updated_at: string
+            /**
+             * @description The name of the webhook
+             * @default
+             */
+            name: string
+            /**
+             * @description The description of the webhook
+             * @default
+             */
+            description: string | null
+            /**
+             * @description The URL where webhook events will be sent
+             * @default
+             */
+            url: string
+            /**
+             * @description The signing key used to sign webhook payloads
+             * @default
+             */
+            secret: string | null
+            /** @description Array of event names */
+            events: string[]
+            /**
+             * @description Custom headers to include in webhook requests
+             * @default null
+             */
+            headers: Record<string, unknown> | null
+            filters: {
+              /** @description Array of repository IDs */
+              repositoryIds: string[] | null
+            } | null
+          }
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
+  /**
+   * Get webhook
+   * @description Get a webhook for the specified organization.
+   *
+   * This endpoint consumes 1 unit of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - webhooks:list
+   */
+  getOrgWebhook: {
+    parameters: {
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+        /** @description The ID of the webhook */
+        webhook_id: string
+      }
+    }
+    responses: {
+      /** @description Webhook details */
+      200: {
+        content: {
+          'application/json': {
+            /**
+             * @description The ID of the webhook
+             * @default
+             */
+            id: string
+            /**
+             * @description The creation date of the webhook
+             * @default
+             */
+            created_at: string
+            /**
+             * @description The last update date of the webhook
+             * @default
+             */
+            updated_at: string
+            /**
+             * @description The name of the webhook
+             * @default
+             */
+            name: string
+            /**
+             * @description The description of the webhook
+             * @default
+             */
+            description: string | null
+            /**
+             * @description The URL where webhook events will be sent
+             * @default
+             */
+            url: string
+            /**
+             * @description The signing key used to sign webhook payloads
+             * @default
+             */
+            secret: string | null
+            /** @description Array of event names */
+            events: string[]
+            /**
+             * @description Custom headers to include in webhook requests
+             * @default null
+             */
+            headers: Record<string, unknown> | null
+            filters: {
+              /** @description Array of repository IDs */
+              repositoryIds: string[] | null
+            } | null
+          }
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
+  /**
+   * Update webhook
+   * @description Update details of an existing webhook.
+   *
+   * This endpoint consumes 1 unit of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - webhooks:update
+   */
+  updateOrgWebhook: {
+    parameters: {
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+        /** @description The ID of the webhook */
+        webhook_id: string
+      }
+    }
+    requestBody?: {
+      content: {
+        'application/json': {
+          /**
+           * @description The name of the webhook
+           * @default
+           */
+          name?: string
+          /**
+           * @description The description of the webhook
+           * @default
+           */
+          description?: string | null
+          /**
+           * @description The URL where webhook events will be sent
+           * @default
+           */
+          url?: string
+          /**
+           * @description The signing key used to sign webhook payloads
+           * @default
+           */
+          secret?: string | null
+          /** @description Array of event names */
+          events?: string[]
+          /**
+           * @description Custom headers to include in webhook requests
+           * @default null
+           */
+          headers?: Record<string, unknown> | null
+          filters?: {
+            /** @description Array of repository IDs */
+            repositoryIds: string[] | null
+          } | null
+        }
+      }
+    }
+    responses: {
+      /** @description Updated webhook details */
+      200: {
+        content: {
+          'application/json': {
+            /**
+             * @description The ID of the webhook
+             * @default
+             */
+            id: string
+            /**
+             * @description The creation date of the webhook
+             * @default
+             */
+            created_at: string
+            /**
+             * @description The last update date of the webhook
+             * @default
+             */
+            updated_at: string
+            /**
+             * @description The name of the webhook
+             * @default
+             */
+            name: string
+            /**
+             * @description The description of the webhook
+             * @default
+             */
+            description: string | null
+            /**
+             * @description The URL where webhook events will be sent
+             * @default
+             */
+            url: string
+            /**
+             * @description The signing key used to sign webhook payloads
+             * @default
+             */
+            secret: string | null
+            /** @description Array of event names */
+            events: string[]
+            /**
+             * @description Custom headers to include in webhook requests
+             * @default null
+             */
+            headers: Record<string, unknown> | null
+            filters: {
+              /** @description Array of repository IDs */
+              repositoryIds: string[] | null
+            } | null
+          }
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
+  /**
+   * Delete webhook
+   * @description Delete a webhook. This will stop all future webhook deliveries to the webhook URL.
+   *
+   * This endpoint consumes 1 unit of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - webhooks:delete
+   */
+  deleteOrgWebhook: {
+    parameters: {
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+        /** @description The ID of the webhook */
+        webhook_id: string
+      }
+    }
+    responses: {
+      /** @description Success */
+      200: {
+        content: {
+          'application/json': {
+            /** @default ok */
+            status: string
+          }
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
+  /**
+   * List latest alerts (Beta)
+   * @description List latest alerts.
+   *
+   * This endpoint consumes 10 units of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - alerts:list
+   */
+  alertsList: {
+    parameters: {
+      query?: {
+        /** @description Specify the maximum number of results to return per page (intermediate pages may have fewer than this limit and callers should always check "endCursor" in response body to know if there are more pages) */
+        per_page?: number
+        /** @description The pagination cursor that was returned as the "endCursor" property in previous request */
+        startAfterCursor?: string
+        /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be included */
+        'filters.alertAction'?: string
+        /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be excluded */
+        'filters.alertAction.notIn'?: string
+        /** @description Comma-separated list of alert action source types ("fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be included */
+        'filters.alertActionSourceType'?: string
+        /** @description Comma-separated list of alert action source types ("fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be excluded */
+        'filters.alertActionSourceType.notIn'?: string
+        /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be included */
+        'filters.alertCategory'?: string
+        /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be excluded */
+        'filters.alertCategory.notIn'?: string
+        /** @description Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertClearedAt.eq'?: string
+        /** @description Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertClearedAt.lt'?: string
+        /** @description Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertClearedAt.lte'?: string
+        /** @description Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertClearedAt.gt'?: string
+        /** @description Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertClearedAt.gte'?: string
+        /** @description Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertCreatedAt.eq'?: string
+        /** @description Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertCreatedAt.lt'?: string
+        /** @description Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertCreatedAt.lte'?: string
+        /** @description Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertCreatedAt.gt'?: string
+        /** @description Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertCreatedAt.gte'?: string
+        /** @description CVE ID */
+        'filters.alertCveId'?: string
+        /** @description CVE ID */
+        'filters.alertCveId.notIn'?: string
+        /** @description CVE title */
+        'filters.alertCveTitle'?: string
+        /** @description CVE title */
+        'filters.alertCveTitle.notIn'?: string
+        /** @description CWE ID */
+        'filters.alertCweId'?: string
+        /** @description CWE ID */
+        'filters.alertCweId.notIn'?: string
+        /** @description CWE name */
+        'filters.alertCweName'?: string
+        /** @description CWE name */
+        'filters.alertCweName.notIn'?: string
+        /** @description Alert EPSS ("low", "medium", "high", "critical") */
+        'filters.alertEPSS'?: string
+        /** @description Alert EPSS ("low", "medium", "high", "critical") */
+        'filters.alertEPSS.notIn'?: string
+        /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be included */
+        'filters.alertFixType'?: string
+        /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be excluded */
+        'filters.alertFixType.notIn'?: string
+        /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
+        'filters.alertKEV'?: boolean
+        /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
+        'filters.alertKEV.notIn'?: boolean
+        /** @description Alert priority ("low", "medium", "high", or "critical") */
+        'filters.alertPriority'?: string
+        /** @description Alert priority ("low", "medium", "high", or "critical") */
+        'filters.alertPriority.notIn'?: string
+        /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be included */
+        'filters.alertReachabilityAnalysisType'?: string
+        /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be excluded */
+        'filters.alertReachabilityAnalysisType.notIn'?: string
+        /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be included */
+        'filters.alertReachabilityType'?: string
+        /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be excluded */
+        'filters.alertReachabilityType.notIn'?: string
+        /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be included */
+        'filters.alertSeverity'?: string
+        /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be excluded */
+        'filters.alertSeverity.notIn'?: string
+        /** @description A single alert status ("open" or "cleared") */
+        'filters.alertStatus'?: string
+        /** @description A single alert status ("open" or "cleared") */
+        'filters.alertStatus.notIn'?: string
+        /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be included */
+        'filters.alertType'?: string
+        /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be excluded */
+        'filters.alertType.notIn'?: string
+        /** @description Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertUpdatedAt.eq'?: string
+        /** @description Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertUpdatedAt.lt'?: string
+        /** @description Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertUpdatedAt.lte'?: string
+        /** @description Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertUpdatedAt.gt'?: string
+        /** @description Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertUpdatedAt.gte'?: string
+        /** @description Name of artifact */
+        'filters.artifactName'?: string
+        /** @description Name of artifact */
+        'filters.artifactName.notIn'?: string
+        /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be included */
+        'filters.artifactType'?: string
+        /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be excluded */
+        'filters.artifactType.notIn'?: string
+        /** @description Dead/reachable dependency filter flag */
+        'filters.dependencyDead'?: boolean
+        /** @description Dead/reachable dependency filter flag */
+        'filters.dependencyDead.notIn'?: boolean
+        /** @description Development/production dependency filter flag */
+        'filters.dependencyDev'?: boolean
+        /** @description Development/production dependency filter flag */
+        'filters.dependencyDev.notIn'?: boolean
+        /** @description Direct/transitive dependency filter flag */
+        'filters.dependencyDirect'?: boolean
+        /** @description Direct/transitive dependency filter flag */
+        'filters.dependencyDirect.notIn'?: boolean
+        /** @description Comma-separated list of repo full names that should be included */
+        'filters.repoFullName'?: string
+        /** @description Comma-separated list of repo full names that should be excluded */
+        'filters.repoFullName.notIn'?: string
+        /** @description Comma-separated list of repo labels that should be included. Use "" to filter for repositories with no labels. */
+        'filters.repoLabels'?: string
+        /** @description Comma-separated list of repo labels that should be excluded. Use "" to filter for repositories with no labels. */
+        'filters.repoLabels.notIn'?: string
+        /** @description Comma-separated list of repo slugs that should be included */
+        'filters.repoSlug'?: string
+        /** @description Comma-separated list of repo slugs that should be excluded */
+        'filters.repoSlug.notIn'?: string
+      }
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+      }
+    }
+    responses: {
+      /** @description The paginated array of alert items for the organization and related metadata. */
+      200: {
+        content: {
+          'application/json': {
+            /** @default */
+            endCursor: string | null
+            items: Array<{
+              /** @default */
+              key: string
+              /** @default */
+              type: string
+              /** @default */
+              category: string
+              fix: {
+                /** @default */
+                type: string
+                /** @default */
+                description: string | null
+              } | null
+              vulnerability: {
+                /** @default */
+                cveId: string | null
+                /** @default */
+                cveTitle: string | null
+                /** @default */
+                cveDescription: string | null
+                /** @default 0 */
+                cvssScore: number
+                cweIds: string[] | null
+                cweNames: string[] | null
+                ghsaIds: string[] | null
+                /** @default 0 */
+                epssScore: number
+                /** @default 0 */
+                epssPercentile: number
+                /** @default false */
+                isKev: boolean
+              } | null
+              /** @default */
+              id: string
+              /** @default 0 */
+              version: number
+              /**
+               * @default open
+               * @enum {string}
+               */
+              status: 'open' | 'cleared'
+              /** @default */
+              createdAt: string
+              /** @default */
+              updatedAt: string
+              /** @default */
+              clearedAt: string | null
+              /** @default */
+              dashboardUrl: string
+              /** @default */
+              title: string
+              /**
+               * @default low
+               * @enum {string}
+               */
+              severity: 'low' | 'medium' | 'high' | 'critical'
+              locations: {
+                /** @default */
+                action: string
+                /** @default */
+                actionSourceType: string
+                reachability: {
+                  /** @default */
+                  type: string
+                  /** @default */
+                  analysisType: string | null
+                }
+                licenseViolation: {
+                  violationData: {
+                    /** @default */
+                    purl: string | null
+                    /** @default */
+                    spdxAtomOrExtraData: string
+                  }[]
+                } | null
+                prioritization: {
+                  /** @default 0 */
+                  overallScore: number
+                  /** @default 0 */
+                  fixableScore: number
+                  /** @default 0 */
+                  reachableScore: number
+                  /** @default 0 */
+                  severityScore: number
+                }
+                repository: {
+                  /** @default */
+                  fullName: string | null
+                  /** @default */
+                  id: string | null
+                  /** @default */
+                  slug: string | null
+                  /** @default */
+                  workspace: string | null
+                  labels: string[]
+                  labelIds: string[]
+                } | null
+                branch: {
+                  /** @default */
+                  name: string
+                  /** @default */
+                  type: string | null
+                } | null
+                patch: {
+                  /** @default */
+                  uuid: string | null
+                  /**
+                   * @default patch_unavailable
+                   * @enum {string}
+                   */
+                  status:
+                    | 'patch_unavailable'
+                    | 'patch_available'
+                    | 'patch_applied'
+                  /** @default false */
+                  deprecated: boolean
+                }
+                dependency: {
+                  /** @default false */
+                  direct: boolean
+                  /** @default false */
+                  dev: boolean
+                  /** @default false */
+                  dead: boolean
+                  manifestFiles: components['schemas']['SocketManifestReference'][]
+                }
+                artifact: {
+                  /** @default */
+                  type: string
+                  /** @default */
+                  namespace: string | null
+                  /** @default */
+                  name: string
+                  /** @default */
+                  id: string
+                  /** @default */
+                  version: string
+                  /** @default */
+                  author: string | null
+                  /** @default */
+                  license: string | null
+                  scores: components['schemas']['SocketScore']
+                  /** @default */
+                  artifactId: string | null
+                }
+              }[]
+            }>
+            meta: {
+              /** @default */
+              organizationId: string
+              /** @default 0 */
+              queryStartTimestamp: number
+              filters: {
+                /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be included */
+                alertAction?: string[]
+                /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be excluded */
+                'alertAction.notIn'?: string[]
+                /** @description Comma-separated list of alert action source types ("fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be included */
+                alertActionSourceType?: string[]
+                /** @description Comma-separated list of alert action source types ("fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be excluded */
+                'alertActionSourceType.notIn'?: string[]
+                /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be included */
+                alertCategory?: string[]
+                /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be excluded */
+                'alertCategory.notIn'?: string[]
+                /** @description Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertClearedAt.eq'?: string[]
+                /** @description Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertClearedAt.lt'?: string[]
+                /** @description Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertClearedAt.lte'?: string[]
+                /** @description Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertClearedAt.gt'?: string[]
+                /** @description Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertClearedAt.gte'?: string[]
+                /** @description Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertCreatedAt.eq'?: string[]
+                /** @description Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertCreatedAt.lt'?: string[]
+                /** @description Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertCreatedAt.lte'?: string[]
+                /** @description Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertCreatedAt.gt'?: string[]
+                /** @description Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertCreatedAt.gte'?: string[]
+                /** @description CVE ID */
+                alertCveId?: string[]
+                /** @description CVE ID */
+                'alertCveId.notIn'?: string[]
+                /** @description CVE title */
+                alertCveTitle?: string[]
+                /** @description CVE title */
+                'alertCveTitle.notIn'?: string[]
+                /** @description CWE ID */
+                alertCweId?: string[]
+                /** @description CWE ID */
+                'alertCweId.notIn'?: string[]
+                /** @description CWE name */
+                alertCweName?: string[]
+                /** @description CWE name */
+                'alertCweName.notIn'?: string[]
+                /** @description Alert EPSS ("low", "medium", "high", "critical") */
+                alertEPSS?: string[]
+                /** @description Alert EPSS ("low", "medium", "high", "critical") */
+                'alertEPSS.notIn'?: string[]
+                /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be included */
+                alertFixType?: string[]
+                /** @description Comma-separated list of alert fix types ("upgrade", "cve", or "remove") that should be excluded */
+                'alertFixType.notIn'?: string[]
+                /** @description Alert KEV (Known Exploited Vulnerability) filter flag */
+                alertKEV?: boolean[]
+                /** @description Alert priority ("low", "medium", "high", or "critical") */
+                alertPriority?: string[]
+                /** @description Alert priority ("low", "medium", "high", or "critical") */
+                'alertPriority.notIn'?: string[]
+                /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be included */
+                alertReachabilityAnalysisType?: string[]
+                /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be excluded */
+                'alertReachabilityAnalysisType.notIn'?: string[]
+                /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be included */
+                alertReachabilityType?: string[]
+                /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be excluded */
+                'alertReachabilityType.notIn'?: string[]
+                /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be included */
+                alertSeverity?: string[]
+                /** @description Comma-separated list of alert severities ("low", "medium", "high", or "critical") that should be excluded */
+                'alertSeverity.notIn'?: string[]
+                /** @description A single alert status ("open" or "cleared") */
+                alertStatus?: string[]
+                /** @description A single alert status ("open" or "cleared") */
+                'alertStatus.notIn'?: string[]
+                /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be included */
+                alertType?: string[]
+                /** @description Comma-separated list of alert types (e.g. "usesEval", "unmaintained", etc.) that should be excluded */
+                'alertType.notIn'?: string[]
+                /** @description Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertUpdatedAt.eq'?: string[]
+                /** @description Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertUpdatedAt.lt'?: string[]
+                /** @description Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertUpdatedAt.lte'?: string[]
+                /** @description Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertUpdatedAt.gt'?: string[]
+                /** @description Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertUpdatedAt.gte'?: string[]
+                /** @description Name of artifact */
+                artifactName?: string[]
+                /** @description Name of artifact */
+                'artifactName.notIn'?: string[]
+                /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be included */
+                artifactType?: string[]
+                /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be excluded */
+                'artifactType.notIn'?: string[]
+                /** @description Dead/reachable dependency filter flag */
+                dependencyDead?: boolean[]
+                /** @description Development/production dependency filter flag */
+                dependencyDev?: boolean[]
+                /** @description Direct/transitive dependency filter flag */
+                dependencyDirect?: boolean[]
+                /** @description Comma-separated list of repo full names that should be included */
+                repoFullName?: string[]
+                /** @description Comma-separated list of repo full names that should be excluded */
+                'repoFullName.notIn'?: string[]
+                /** @description Comma-separated list of repo labels that should be included. Use "" to filter for repositories with no labels. */
+                repoLabels?: string[]
+                /** @description Comma-separated list of repo labels that should be excluded. Use "" to filter for repositories with no labels. */
+                'repoLabels.notIn'?: string[]
+                /** @description Comma-separated list of repo slugs that should be included */
+                repoSlug?: string[]
+                /** @description Comma-separated list of repo slugs that should be excluded */
+                'repoSlug.notIn'?: string[]
+              }
+            }
+          }
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
+  /**
+   * List full scans associated with alert (Beta)
+   * @description List full scans associated with alert.
+   *
+   * This endpoint consumes 10 units of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - alerts:list
+   */
+  alertFullScans: {
+    parameters: {
+      query: {
+        /** @description Specify the maximum number of items to return per page (intermediate pages may have fewer than this limit and callers should always check "endCursor" in response body to know if there are more pages) */
+        per_page?: number
+        /** @description The pagination cursor that was returned as the "endCursor" property in previous request */
+        startAfterCursor?: string
+        /** @description One or more alert keys for which to find associated full scans */
+        alertKey: string
+        /** @description The number of days of data to fetch as an offset from current date (e.g. "-7d" for past 7 days) */
+        range?: string
+      }
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+      }
+    }
+    responses: {
+      /** @description The paginated array of full scans associated with alert for the organization and related metadata. */
+      200: {
+        content: {
+          'application/json': {
+            /** @default */
+            endCursor: string | null
+            items: Array<{
+              /**
+               * @description ID of full scan
+               * @default
+               */
+              fullScanId: string
+              /** @default */
+              branchName: string | null
+              /**
+               * @description Type of branch that was scanned
+               * @default
+               * @enum {string}
+               */
+              branchType:
+                | 'default'
+                | 'non-default'
+                | 'tracked'
+                | 'untracked'
+                | ''
+              /**
+               * @description Full name of repo which contains repo workspace and repo slug
+               * @default
+               */
+              repoFullName: string | null
+              /**
+               * @description ISO date when SBOM was created
+               * @default
+               */
+              sbomCreatedAt: string
+              /**
+               * @description ISO date when SBOM was scanned
+               * @default
+               */
+              scannedAt: string
+              alertKeys: string[]
+            }>
+            meta: {
+              /** @default */
+              organizationId: string
+              alertKeys: string[]
+              /** @default 0 */
+              queryStartTimestamp: number
+              /** @default */
+              startDateInclusive: string
+              /** @default */
+              endDateInclusive: string
+            }
+          }
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
   /**
    * License Policy (Beta)
    * @description Compare the license data found for a list of packages (given as PURL strings) with the contents of a configurable license policy,