@socketsecurity/sdk 3.2.0 → 3.3.0

package/types/api.d.ts

@@ -7,7 +7,10 @@ export interface paths {
   '/purl': {
     /**
      * Get Packages by PURL
-     * @description Batch retrieval of package metadata and alerts by PURL strings. Compatible witch CycloneDX reports.
+     * @deprecated
+     * @description **This endpoint is deprecated.** Deprecated since 2026-01-05. It will be removed on 2026-07-30.
+     *
+     * Batch retrieval of package metadata and alerts by PURL strings. Compatible with CycloneDX reports.
      *
      * Package URLs (PURLs) are an ecosystem agnostic way to identify packages.
      * CycloneDX SBOMs use the purl format to identify components.
@@ -135,7 +138,7 @@ export interface paths {
      *
      * To get a list of supported filetypes that can be uploaded in a full-scan, see the [Get supported file types](/reference/getsupportedfiles) endpoint.
      *
-     * The maximum number of files you can upload at a time is 5000 and each file can be no bigger than 67 MB.
+     * The maximum number of files you can upload at a time is 5000 and each file can be no bigger than 268 MB.
      *
      * **Query Parameters:**
      * - `scan_type` (optional): The type of scan to perform. Defaults to 'socket'. Must be 32 characters or less. Used for categorizing multiple SBOM heads per repository branch.
@@ -233,7 +236,7 @@ export interface paths {
      *
      * Each uploaded archive is extracted server-side and any supported manifest files (like package.json, package-lock.json, pnpm-lock.yaml, etc.) are ingested for the scan. If you upload multiple archives in a single request, the manifests from every archive are merged into one full scan. The response includes any files that were ignored.
      *
-     * The maximum combined number of files extracted from your upload is 5000 and each extracted file can be no bigger than 67 MB.
+     * The maximum combined number of files extracted from your upload is 5000 and each extracted file can be no bigger than 268 MB.
      *
      * This endpoint consumes 1 unit of your quota.
      *
@@ -242,6 +245,18 @@ export interface paths {
      */
     post: operations['CreateOrgFullScanArchive']
   }
+  '/orgs/{org_slug}/full-scans/{full_scan_id}/rescan': {
+    /**
+     * Rescan full scan
+     * @description Create a new full scan by rescanning an existing scan. A "shallow" rescan reapplies the latest policies to the previously cached dependency resolution results. A "deep" rescan reruns dependency resolution and applies the latest policies to the results.
+     *
+     * This endpoint consumes 1 unit of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - full-scans:create
+     */
+    post: operations['rescanOrgFullScan']
+  }
   '/orgs/{org_slug}/export/cdx/{id}': {
     /**
      * Export CycloneDX SBOM (Beta)
@@ -268,6 +283,31 @@ export interface paths {
      */
     get: operations['exportCDX']
   }
+  '/orgs/{org_slug}/export/openvex/{id}': {
+    /**
+     * Export OpenVEX Document (Beta)
+     * @description Export vulnerability exploitability data as an OpenVEX v0.2.0 document.
+     *
+     * OpenVEX (Vulnerability Exploitability eXchange) documents communicate the
+     * exploitability status of vulnerabilities in software products. This export
+     * includes:
+     *
+     * - **Patch data**: Vulnerabilities fixed by applied Socket patches are marked as "fixed"
+     * - **Reachability analysis**: Code reachability determines if vulnerable code is exploitable:
+     * - Unreachable code → "not_affected" with justification
+     * - Reachable code → "affected"
+     * - Unknown/pending → "under_investigation"
+     *
+     * Each statement in the document represents a single artifact-vulnerability pair
+     * for granular reachability information.
+     *
+     * This endpoint consumes 1 unit of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - report:read
+     */
+    get: operations['exportOpenVEX']
+  }
   '/orgs/{org_slug}/export/spdx/{id}': {
     /**
      * Export SPDX SBOM (Beta)
@@ -347,7 +387,7 @@ export interface paths {
      * Returns metadata about the diff scan. Once the diff scan is created, fetch the diff scan from
      * the [api_url](/reference/getDiffScanById) URL to get the contents of the diff.
      *
-     * The maximum number of files you can upload at a time is 5000 and each file can be no bigger than 67 MB.
+     * The maximum number of files you can upload at a time is 5000 and each file can be no bigger than 268 MB.
      *
      * This endpoint consumes 1 unit of your quota.
      *
@@ -931,6 +971,107 @@ export interface paths {
      */
     get: operations['getOrgThreatFeedItems']
   }
+  '/orgs/{org_slug}/purl': {
+    /**
+     * Get Packages by PURL (Org Scoped)
+     * @description Batch retrieval of package metadata and alerts by PURL strings for a specific organization. Compatible with CycloneDX reports.
+     *
+     * Package URLs (PURLs) are an ecosystem agnostic way to identify packages.
+     * CycloneDX SBOMs use the purl format to identify components.
+     * This endpoint supports fetching metadata and alerts for multiple packages at once by passing an array of purl strings, or by passing an entire CycloneDX report.
+     *
+     * **Note:** This endpoint has a batch size limit (default: 1024 PURLs per request). Requests exceeding this limit will return a 400 Bad Request error.
+     *
+     * More information on purl and CycloneDX:
+     *
+     * - [`purl` Spec](https://github.com/package-url/purl-spec)
+     * - [CycloneDX Spec](https://cyclonedx.org/specification/overview/#components)
+     *
+     * This endpoint returns the latest available alert data for artifacts in the batch (stale while revalidate).
+     * Actively running analysis will be returned when available on subsequent runs.
+     *
+     * ## Query Parameters
+     *
+     * This endpoint supports all query parameters from `POST /v0/purl` including: `alerts`, `actions`, `compact`, `fixable`, `licenseattrib`, `licensedetails`, `purlErrors`, `cachedResultsOnly`, and `summary`.
+     *
+     * Additionally, you may provide a `labels` query parameter to apply a repository label's security policies. Pass the label slug as the value (e.g., `?labels=production`). Only one label is currently supported.
+     *
+     * ## Examples:
+     *
+     * ### Looking up an npm package:
+     *
+     * ```json
+     * {
+     *   "components": [
+     *     {
+     *       "purl": "pkg:npm/express@4.19.2"
+     *     }
+     *   ]
+     * }
+     * ```
+     *
+     * ### Looking up a PyPi package:
+     *
+     * ```json
+     * {
+     *   "components": [
+     *     {
+     *       "purl": "pkg:pypi/django@5.0.6"
+     *     }
+     *   ]
+     * }
+     * ```
+     *
+     * ### Looking up a Maven package:
+     *
+     * ```json
+     * {
+     *   "components": [
+     *     {
+     *       "purl": "pkg:maven/log4j/log4j@1.2.17"
+     *     }
+     *   ]
+     * }
+     * ```
+     *
+     * ### Batch lookup
+     *
+     * ```json
+     * {
+     *   "components": [
+     *     {
+     *       "purl": "pkg:npm/express@4.19.2"
+     *     },
+     *     {
+     *       "purl": "pkg:pypi/django@5.0.6"
+     *     },
+     *     {
+     *       "purl": "pkg:maven/log4j/log4j@1.2.17"
+     *     }
+     *   ]
+     * }
+     * ```
+     *
+     * ### With label and options (query parameters):
+     *
+     * ```
+     * POST /v0/orgs/{org_slug}/purl?labels=production&alerts=true&compact=true
+     * {
+     *   "components": [
+     *     {
+     *       "purl": "pkg:npm/express@4.19.2"
+     *     }
+     *   ]
+     * }
+     * ```
+     *
+     * This endpoint consumes 100 units of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - packages:list
+     */
+    post: operations['batchPackageFetchByOrg']
+  }
   '/orgs/{org_slug}/fixes': {
     /**
      * Fetch fixes for vulnerabilities in a repository or scan
@@ -938,6 +1079,57 @@ export interface paths {
      * Requires either repo_slug or full_scan_id as well as vulnerability_ids to be provided.
      * vulnerability_ids can be a comma-separated list of GHSA or CVE IDs, or "*" for all vulnerabilities.
      *
+     * ## Response Structure
+     *
+     * The response contains a `fixDetails` object where each key is a vulnerability ID (GHSA or CVE) and the value is a discriminated union based on the `type` field.
+     *
+     * ### Common Fields
+     *
+     * All response variants include:
+     * - `type`: Discriminator field (one of: "fixFound", "partialFixFound", "noFixAvailable", "fixNotApplicable", "errorComputingFix")
+     * - `value`: Object containing the variant-specific data
+     *
+     * The `value` object always contains:
+     * - `ghsa`: string | null - The GHSA ID
+     * - `cve`: string | null - The CVE ID (if available)
+     * - `advisoryDetails`: object | null - Advisory details (only if include_details=true)
+     *
+     * ### Response Variants
+     *
+     * **fixFound**: A complete fix is available for all vulnerable packages
+     * - `value.fixDetails.fixes`: Array of fix objects, each containing:
+     *   - `purl`: Package URL to upgrade
+     *   - `fixedVersion`: Version to upgrade to
+     *   - `manifestFiles`: Array of manifest files containing the package
+     *   - `updateType`: "patch" | "minor" | "major" | "unknown"
+     * - `value.fixDetails.responsibleDirectDependencies`: (optional) Map of direct dependencies responsible for the vulnerability
+     *
+     * **partialFixFound**: Fixes available for some but not all vulnerable packages
+     * - Same as fixFound, plus:
+     * - `value.fixDetails.unfixablePurls`: Array of packages that cannot be fixed, each containing:
+     *   - `purl`: Package URL
+     *   - `manifestFiles`: Array of manifest files
+     *
+     * **noFixAvailable**: No fix exists for this vulnerability (no patched version published)
+     *
+     * **fixNotApplicable**: A fix exists but cannot be applied due to version constraints
+     * - `value.vulnerableArtifacts`: Array of vulnerable packages with their manifest files
+     *
+     * **errorComputingFix**: An error occurred while computing fixes
+     * - `value.message`: Error description
+     *
+     * ### Advisory Details (when include_details=true)
+     *
+     * - `title`: string | null
+     * - `description`: string | null
+     * - `cwes`: string[] - CWE identifiers
+     * - `severity`: "LOW" | "MODERATE" | "HIGH" | "CRITICAL"
+     * - `cvssVector`: string | null
+     * - `publishedAt`: string (ISO date)
+     * - `kev`: boolean - Whether it's a Known Exploited Vulnerability
+     * - `epss`: number | null - Exploit Prediction Scoring System score
+     * - `affectedPurls`: Array of affected packages with version ranges
+     *
      * This endpoint consumes 10 units of your quota.
      *
      * This endpoint requires the following org token scopes:
@@ -1032,6 +1224,18 @@ export interface paths {
      */
     get: operations['alertsList']
   }
+  '/orgs/{org_slug}/alert-full-scan-search': {
+    /**
+     * List full scans associated with alert (Beta)
+     * @description List full scans associated with alert.
+     *
+     * This endpoint consumes 10 units of your quota.
+     *
+     * This endpoint requires the following org token scopes:
+     * - alerts:list
+     */
+    get: operations['alertFullScans']
+  }
   '/license-policy': {
     /**
      * License Policy (Beta)
@@ -1638,7 +1842,7 @@ export interface components {
           _type: 'summary'
           value: components['schemas']['PurlSummarySchema']
         }
-    SocketBatchPURLFetch: {
+    SocketOrgBatchPURLFetch: {
       components: Array<components['schemas']['SocketBatchPURLRequest']>
     }
     SocketArtifact: components['schemas']['SocketPURL'] &
@@ -1815,6 +2019,25 @@ export interface components {
         }
       }>
     }
+    OpenVEXDocumentSchema: {
+      /** @default https://openvex.dev/ns/v0.2.0 */
+      '@context': string
+      /** @default */
+      '@id': string
+      /** @default Socket Security */
+      author: string
+      /** @default */
+      timestamp: string
+      /** @default 1 */
+      version: number
+      statements: Array<components['schemas']['OpenVEXStatementSchema']>
+      /** @default VEX Generator */
+      role?: string
+      /** @default */
+      last_updated?: string
+      /** @default Socket Security VEX Generator */
+      tooling?: string
+    }
     SPDXManifestSchema: {
       /** @default SPDX-2.3 */
       spdxVersion: string
@@ -2429,6 +2652,32 @@ export interface components {
       }>
       components?: Array<components['schemas']['CDXComponentSchema']>
     }
+    OpenVEXStatementSchema: {
+      vulnerability: components['schemas']['OpenVEXVulnerabilitySchema']
+      products: Array<components['schemas']['OpenVEXProductSchema']>
+      /** @default affected */
+      status: string
+      /** @default */
+      '@id'?: string
+      /** @default 0 */
+      version?: number
+      /** @default */
+      timestamp?: string
+      /** @default */
+      last_updated?: string
+      /** @default */
+      supplier?: string
+      /** @default */
+      status_notes?: string
+      /** @default */
+      justification?: string
+      /** @default */
+      impact_statement?: string
+      /** @default */
+      action_statement?: string
+      /** @default */
+      action_statement_timestamp?: string
+    }
     LicenseAllowListElabbed: {
       strings: string[]
       classes: string[]
@@ -3045,6 +3294,19 @@ export interface components {
             usage?: components['schemas']['SocketUsageRef']
           }
         }
+      | {
+          /** @enum {string} */
+          type?: 'tooManyFiles'
+          value?: components['schemas']['SocketIssueBasics'] & {
+            /** @default */
+            description: string
+            props: {
+              /** @default 0 */
+              fileCount: number
+            }
+            usage?: components['schemas']['SocketUsageRef']
+          }
+        }
       | {
           /** @enum {string} */
           type?: 'generic'
@@ -3172,6 +3434,21 @@ export interface components {
             usage?: components['schemas']['SocketUsageRef']
           }
         }
+      | {
+          /** @enum {string} */
+          type?: 'recentlyPublished'
+          value?: components['schemas']['SocketIssueBasics'] & {
+            /** @default */
+            description: string
+            props: {
+              /** @default */
+              publishedAt: string
+              /** @default */
+              checkedAt: string
+            }
+            usage?: components['schemas']['SocketUsageRef']
+          }
+        }
       | {
           /** @enum {string} */
           type?: 'licenseSpdxDisj'
@@ -4405,6 +4682,7 @@ export interface components {
       | 'pub'
       | 'pypi'
       | 'rpm'
+      | 'socket'
       | 'swid'
       | 'swift'
       | 'vscode'
@@ -4453,6 +4731,22 @@ export interface components {
       /** @description Reachability analysis results for each vulnerability */
       results: Array<components['schemas']['ReachabilityResultItem']>
     }
+    OpenVEXVulnerabilitySchema: {
+      /** @default */
+      name: string
+      /** @default */
+      '@id'?: string
+      /** @default */
+      description?: string
+      aliases?: string[]
+    }
+    OpenVEXProductSchema: {
+      /** @default */
+      '@id': string
+      identifiers?: components['schemas']['OpenVEXIdentifiersSchema']
+      hashes?: components['schemas']['OpenVEXHashesSchema']
+      subcomponents?: Array<components['schemas']['OpenVEXComponentSchema']>
+    }
     SocketIssueBasics: {
       severity: components['schemas']['SocketIssueSeverity']
       category: components['schemas']['SocketCategory']
@@ -4508,6 +4802,46 @@ export interface components {
        */
       subprojectPath?: string
     }
+    OpenVEXIdentifiersSchema: {
+      /** @default */
+      purl?: string
+      /** @default */
+      cpe23?: string
+      /** @default */
+      cpe22?: string
+    }
+    OpenVEXHashesSchema: {
+      /** @default */
+      md5?: string
+      /** @default */
+      sha1?: string
+      /** @default */
+      'sha-256'?: string
+      /** @default */
+      'sha-384'?: string
+      /** @default */
+      'sha-512'?: string
+      /** @default */
+      'sha3-224'?: string
+      /** @default */
+      'sha3-256'?: string
+      /** @default */
+      'sha3-384'?: string
+      /** @default */
+      'sha3-512'?: string
+      /** @default */
+      'blake2s-256'?: string
+      /** @default */
+      'blake2b-256'?: string
+      /** @default */
+      'blake2b-512'?: string
+    }
+    OpenVEXComponentSchema: {
+      /** @default */
+      '@id'?: string
+      identifiers?: components['schemas']['OpenVEXIdentifiersSchema']
+      hashes?: components['schemas']['OpenVEXHashesSchema']
+    }
     SocketRefList: Array<components['schemas']['SocketRef']>
     SocketRefFile: {
       /** @default */
@@ -4777,6 +5111,19 @@ export interface components {
         }
       }
     }
+    /** @description Resource already exists */
+    SocketConflict: {
+      content: {
+        'application/json': {
+          error: {
+            /** @default */
+            message: string
+            /** @default null */
+            details: Record<string, unknown> | null
+          }
+        }
+      }
+    }
     /** @description Gone */
     SocketGone: {
       content: {
@@ -4804,7 +5151,10 @@ export type external = Record<string, never>
 export interface operations {
   /**
    * Get Packages by PURL
-   * @description Batch retrieval of package metadata and alerts by PURL strings. Compatible witch CycloneDX reports.
+   * @deprecated
+   * @description **This endpoint is deprecated.** Deprecated since 2026-01-05. It will be removed on 2026-07-30.
+   *
+   * Batch retrieval of package metadata and alerts by PURL strings. Compatible with CycloneDX reports.
    *
    * Package URLs (PURLs) are an ecosystem agnostic way to identify packages.
    * CycloneDX SBOMs use the purl format to identify components.
@@ -4888,7 +5238,7 @@ export interface operations {
         alerts?: boolean
         /** @description Include only alerts with comma separated actions defined by security policy. */
         actions?: Array<'error' | 'monitor' | 'warn' | 'ignore'>
-        /** @description Compact metadata. */
+        /** @description Compact metadata. When enabled, excludes metadata fields like author, scores, size, dependencies, and manifest files. Always includes: id, type, name, version, release, namespace, subpath, alerts, and alertPriorities. */
         compact?: boolean
         /** @description Include only fixable alerts. */
         fixable?: boolean
@@ -4906,7 +5256,7 @@ export interface operations {
     }
     requestBody?: {
       content: {
-        'application/json': components['schemas']['SocketBatchPURLFetch']
+        'application/json': components['schemas']['SocketOrgBatchPURLFetch']
       }
     }
     responses: {
@@ -5156,7 +5506,7 @@ export interface operations {
    *
    * To get a list of supported filetypes that can be uploaded in a full-scan, see the [Get supported file types](/reference/getsupportedfiles) endpoint.
    *
-   * The maximum number of files you can upload at a time is 5000 and each file can be no bigger than 67 MB.
+   * The maximum number of files you can upload at a time is 5000 and each file can be no bigger than 268 MB.
    *
    * **Query Parameters:**
    * - `scan_type` (optional): The type of scan to perform. Defaults to 'socket'. Must be 32 characters or less. Used for categorizing multiple SBOM heads per repository branch.
@@ -5300,6 +5650,8 @@ export interface operations {
           | Array<'component' | 'formula'>
         /** @description Include license details in the response. This can increase the response size significantly. */
         include_license_details: boolean
+        /** @description Return cached immutable scan results. When enabled and results are cached, returns the pre-computed scan. When results are not yet cached, returns 202 Accepted and enqueues a background job. */
+        cached?: boolean
       }
       path: {
         /** @description The slug of the organization */
@@ -5315,6 +5667,17 @@ export interface operations {
           'application/x-ndjson': components['schemas']['SocketArtifact']
         }
       }
+      /** @description Scan is being processed. Poll again later to retrieve results. */
+      202: {
+        content: {
+          'application/json': {
+            /** @default processing */
+            status: string
+            /** @default */
+            id: string
+          }
+        }
+      }
       400: components['responses']['SocketBadRequest']
       401: components['responses']['SocketUnauthorized']
       403: components['responses']['SocketForbidden']
@@ -5702,7 +6065,7 @@ export interface operations {
    *
    * Each uploaded archive is extracted server-side and any supported manifest files (like package.json, package-lock.json, pnpm-lock.yaml, etc.) are ingested for the scan. If you upload multiple archives in a single request, the manifests from every archive are merged into one full scan. The response includes any files that were ignored.
    *
-   * The maximum combined number of files extracted from your upload is 5000 and each extracted file can be no bigger than 67 MB.
+   * The maximum combined number of files extracted from your upload is 5000 and each extracted file can be no bigger than 268 MB.
    *
    * This endpoint consumes 1 unit of your quota.
    *
@@ -5822,6 +6185,47 @@ export interface operations {
       429: components['responses']['SocketTooManyRequestsResponse']
     }
   }
+  /**
+   * Rescan full scan
+   * @description Create a new full scan by rescanning an existing scan. A "shallow" rescan reapplies the latest policies to the previously cached dependency resolution results. A "deep" rescan reruns dependency resolution and applies the latest policies to the results.
+   *
+   * This endpoint consumes 1 unit of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - full-scans:create
+   */
+  rescanOrgFullScan: {
+    parameters: {
+      query?: {
+        /** @description The rescan mode: "shallow" (default) re-applies policies to cached data, "deep" re-fetches the SBOM stream. */
+        mode?: 'shallow' | 'deep'
+      }
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+        /** @description The ID of the full scan to rescan */
+        full_scan_id: string
+      }
+    }
+    responses: {
+      /** @description Rescan initiated successfully */
+      201: {
+        content: {
+          'application/json': {
+            /** @default The ID of the newly created full scan */
+            id: string
+            /** @default The status of the new scan */
+            status: string
+          }
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
   /**
    * Export CycloneDX SBOM (Beta)
    * @description Export a Socket SBOM as a CycloneDX SBOM
@@ -5885,8 +6289,60 @@ export interface operations {
     }
   }
   /**
-   * Export SPDX SBOM (Beta)
-   * @description Export a Socket SBOM as a SPDX SBOM
+   * Export OpenVEX Document (Beta)
+   * @description Export vulnerability exploitability data as an OpenVEX v0.2.0 document.
+   *
+   * OpenVEX (Vulnerability Exploitability eXchange) documents communicate the
+   * exploitability status of vulnerabilities in software products. This export
+   * includes:
+   *
+   * - **Patch data**: Vulnerabilities fixed by applied Socket patches are marked as "fixed"
+   * - **Reachability analysis**: Code reachability determines if vulnerable code is exploitable:
+   * - Unreachable code → "not_affected" with justification
+   * - Reachable code → "affected"
+   * - Unknown/pending → "under_investigation"
+   *
+   * Each statement in the document represents a single artifact-vulnerability pair
+   * for granular reachability information.
+   *
+   * This endpoint consumes 1 unit of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - report:read
+   */
+  exportOpenVEX: {
+    parameters: {
+      query?: {
+        /** @description The author of the VEX document. Should be an individual or organization. */
+        author?: string
+        /** @description The role of the document author (e.g., "VEX Generator", "Security Team"). */
+        role?: string
+        /** @description Custom IRI for the VEX document. If not provided, a default IRI will be generated. */
+        document_id?: string
+      }
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+        /** @description The full scan OR sbom report ID */
+        id: string
+      }
+    }
+    responses: {
+      /** @description OpenVEX v0.2.0 document */
+      200: {
+        content: {
+          'application/json': components['schemas']['OpenVEXDocumentSchema']
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
+  /**
+   * Export SPDX SBOM (Beta)
+   * @description Export a Socket SBOM as a SPDX SBOM
    *
    * Supported ecosystems:
    *
@@ -6039,6 +6495,8 @@ export interface operations {
         omit_license_details?: boolean
         /** @description Omit unchanged artifacts from the response. When set to true, the unchanged field will be set to null. */
         omit_unchanged?: boolean
+        /** @description Return cached immutable scan results. When enabled and results are cached, returns the pre-computed scan. When results are not yet cached, returns 202 Accepted and enqueues a background job. Note: When cached=true, the omit_license_details parameter is ignored as cached results always includes license details. */
+        cached?: boolean
       }
       path: {
         /** @description The slug of the organization */
@@ -6144,6 +6602,17 @@ export interface operations {
           }
         }
       }
+      /** @description Scan is being processed. Poll again later to retrieve results. */
+      202: {
+        content: {
+          'application/json': {
+            /** @default processing */
+            status: string
+            /** @default */
+            id: string
+          }
+        }
+      }
       400: components['responses']['SocketBadRequest']
       401: components['responses']['SocketUnauthorized']
       403: components['responses']['SocketForbidden']
@@ -6315,7 +6784,7 @@ export interface operations {
    * Returns metadata about the diff scan. Once the diff scan is created, fetch the diff scan from
    * the [api_url](/reference/getDiffScanById) URL to get the contents of the diff.
    *
-   * The maximum number of files you can upload at a time is 5000 and each file can be no bigger than 67 MB.
+   * The maximum number of files you can upload at a time is 5000 and each file can be no bigger than 268 MB.
    *
    * This endpoint consumes 1 unit of your quota.
    *
@@ -6463,6 +6932,7 @@ export interface operations {
       401: components['responses']['SocketUnauthorized']
       403: components['responses']['SocketForbidden']
       404: components['responses']['SocketNotFoundResponse']
+      409: components['responses']['SocketConflict']
       429: components['responses']['SocketTooManyRequestsResponse']
     }
   }
@@ -6589,6 +7059,7 @@ export interface operations {
       401: components['responses']['SocketUnauthorized']
       403: components['responses']['SocketForbidden']
       404: components['responses']['SocketNotFoundResponse']
+      409: components['responses']['SocketConflict']
       429: components['responses']['SocketTooManyRequestsResponse']
     }
   }
@@ -7870,6 +8341,13 @@ export interface operations {
                  */
                 action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
               }
+              tooManyFiles?: {
+                /**
+                 * @description The action to take for tooManyFiles issues.
+                 * @enum {string}
+                 */
+                action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
+              }
               generic?: {
                 /**
                  * @description The action to take for generic issues.
@@ -7926,6 +8404,13 @@ export interface operations {
                  */
                 action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
               }
+              recentlyPublished?: {
+                /**
+                 * @description The action to take for recentlyPublished issues.
+                 * @enum {string}
+                 */
+                action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
+              }
               licenseSpdxDisj?: {
                 /**
                  * @description The action to take for licenseSpdxDisj issues.
@@ -8749,6 +9234,13 @@ export interface operations {
                */
               action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
             }
+            tooManyFiles?: {
+              /**
+               * @description The action to take for tooManyFiles issues.
+               * @enum {string}
+               */
+              action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
+            }
             generic?: {
               /**
                * @description The action to take for generic issues.
@@ -8805,6 +9297,13 @@ export interface operations {
                */
               action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
             }
+            recentlyPublished?: {
+              /**
+               * @description The action to take for recentlyPublished issues.
+               * @enum {string}
+               */
+              action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
+            }
             licenseSpdxDisj?: {
               /**
                * @description The action to take for licenseSpdxDisj issues.
@@ -9782,6 +10281,13 @@ export interface operations {
                  */
                 action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
               }
+              tooManyFiles?: {
+                /**
+                 * @description The action to take for tooManyFiles issues.
+                 * @enum {string}
+                 */
+                action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
+              }
               generic?: {
                 /**
                  * @description The action to take for generic issues.
@@ -9838,6 +10344,13 @@ export interface operations {
                  */
                 action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
               }
+              recentlyPublished?: {
+                /**
+                 * @description The action to take for recentlyPublished issues.
+                 * @enum {string}
+                 */
+                action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
+              }
               licenseSpdxDisj?: {
                 /**
                  * @description The action to take for licenseSpdxDisj issues.
@@ -10654,6 +11167,13 @@ export interface operations {
                */
               action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
             }
+            tooManyFiles?: {
+              /**
+               * @description The action to take for tooManyFiles issues.
+               * @enum {string}
+               */
+              action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
+            }
             generic?: {
               /**
                * @description The action to take for generic issues.
@@ -10710,6 +11230,13 @@ export interface operations {
                */
               action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
             }
+            recentlyPublished?: {
+              /**
+               * @description The action to take for recentlyPublished issues.
+               * @enum {string}
+               */
+              action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
+            }
             licenseSpdxDisj?: {
               /**
                * @description The action to take for licenseSpdxDisj issues.
@@ -11495,6 +12022,13 @@ export interface operations {
                  */
                 action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
               }
+              tooManyFiles?: {
+                /**
+                 * @description The action to take for tooManyFiles issues.
+                 * @enum {string}
+                 */
+                action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
+              }
               generic?: {
                 /**
                  * @description The action to take for generic issues.
@@ -11551,6 +12085,13 @@ export interface operations {
                  */
                 action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
               }
+              recentlyPublished?: {
+                /**
+                 * @description The action to take for recentlyPublished issues.
+                 * @enum {string}
+                 */
+                action: 'defer' | 'error' | 'warn' | 'monitor' | 'ignore'
+              }
               licenseSpdxDisj?: {
                 /**
                  * @description The action to take for licenseSpdxDisj issues.
@@ -13728,8 +14269,10 @@ export interface operations {
           | 'ChangeMemberRole'
           | 'ChangePlanSubscriptionSeats'
           | 'CreateApiToken'
+          | 'CreateArtifact'
           | 'CreateLabel'
           | 'CreateWebhook'
+          | 'DeleteApiToken'
           | 'DeleteFullScan'
           | 'DeleteLabel'
           | 'DeleteLabelSetting'
@@ -13844,6 +14387,8 @@ export interface operations {
         per_page?: number
         /** @description The token specifying which page to return. */
         page?: number
+        /** @description Whether to include token values in response. Use "omit" to exclude tokens entirely. */
+        token_values?: 'include' | 'omit'
       }
       path: {
         /** @description The slug of the organization */
@@ -13892,6 +14437,17 @@ export interface operations {
                * @default
                */
               created_at: string
+              /**
+               * Format: uuid
+               * @description The stable group UUID that remains constant across token rotations
+               * @default
+               */
+              group_uuid: string
+              /**
+               * @description SRI-format hash of the token (e.g., sha512-base64hash). Null for tokens created before hash column was added.
+               * @default
+               */
+              hash: string | null
               /**
                * @description The ID of the API Token
                * @default
@@ -13984,17 +14540,21 @@ export interface operations {
                 | 'triage'
                 | 'triage:alerts-list'
                 | 'triage:alerts-update'
+                | 'uploaded-artifacts'
+                | 'uploaded-artifacts:create'
+                | 'uploaded-artifacts:list'
                 | 'webhooks'
                 | 'webhooks:create'
                 | 'webhooks:list'
                 | 'webhooks:update'
                 | 'webhooks:delete'
+                | '*'
               )[]
               /**
-               * @description The obfuscated token of the API Token
+               * @description The token of the API Token (redacted or omitted)
                * @default
                */
-              token: string
+              token: string | null
               /**
                * @description The visibility of the API Token. Warning: this field is deprecated and will be removed in the future.
                * @default organization
@@ -14108,11 +14668,15 @@ export interface operations {
             | 'triage'
             | 'triage:alerts-list'
             | 'triage:alerts-update'
+            | 'uploaded-artifacts'
+            | 'uploaded-artifacts:create'
+            | 'uploaded-artifacts:list'
             | 'webhooks'
             | 'webhooks:create'
             | 'webhooks:list'
             | 'webhooks:update'
             | 'webhooks:delete'
+            | '*'
           >
           /**
            * @description The visibility of the API Token. Warning: this field is deprecated and will be removed in the future.
@@ -14171,18 +14735,26 @@ export interface operations {
       }
     }
     responses: {
-      /** @description The newly created api token. */
+      /** @description The newly created api token with its stable UUID and hash. */
       200: {
         content: {
           'application/json': {
             /**
              * Format: uuid
-             * @description ID of the Socket user who created the API Token, if available
+             * @description ID of the Socket user who created the API Token
              * @default
              */
             created_by: string | null
+            /**
+             * Format: uuid
+             * @description The stable group UUID that remains constant across token rotations
+             * @default
+             */
+            group_uuid: string
             /** @default */
             token: string
+            /** @default */
+            hash: string
           }
         }
       }
@@ -14287,17 +14859,16 @@ export interface operations {
             | 'triage'
             | 'triage:alerts-list'
             | 'triage:alerts-update'
+            | 'uploaded-artifacts'
+            | 'uploaded-artifacts:create'
+            | 'uploaded-artifacts:list'
             | 'webhooks'
             | 'webhooks:create'
             | 'webhooks:list'
             | 'webhooks:update'
             | 'webhooks:delete'
+            | '*'
           >
-          /**
-           * @description The API token to update
-           * @default
-           */
-          token: string
           /**
            * @description The visibility of the API Token. Warning: this field is deprecated and will be removed in the future.
            * @default organization
@@ -14333,6 +14904,27 @@ export interface operations {
            * @default api token
            */
           name?: string
+          /**
+           * Format: uuid
+           * @description The stable group UUID to update (provide uuid, id, token, or hash. May provide uuid+hash together for validation)
+           * @default
+           */
+          uuid?: string
+          /**
+           * @description The API token ID to update (provide uuid, id, token, or hash)
+           * @default
+           */
+          id?: string
+          /**
+           * @description The API token to update (provide uuid, id, token, or hash)
+           * @default
+           */
+          token?: string
+          /**
+           * @description The API token hash to update (provide uuid, id, token, or hash)
+           * @default
+           */
+          hash?: string
         }
       }
     }
@@ -14341,8 +14933,11 @@ export interface operations {
       200: {
         content: {
           'application/json': {
-            /** @default */
-            token: string
+            /**
+             * @description SRI-format hash of the API token (e.g., sha512-base64hash)
+             * @default
+             */
+            hash: string
           }
         }
       }
@@ -14367,28 +14962,49 @@ export interface operations {
         org_slug: string
       }
     }
-    /** @description The API Token to rotate */
+    /** @description The API Token identifier to rotate. Provide uuid (recommended), token, or hash. May provide uuid+hash together for validation. */
     requestBody?: {
       content: {
         'application/json': {
+          /**
+           * Format: uuid
+           * @description The stable group UUID of the API token to rotate
+           * @default
+           */
+          uuid?: string
           /** @default */
-          token: string
+          token?: string
+          /** @default */
+          hash?: string
         }
       }
     }
     responses: {
-      /** @description The replacement API Token */
+      /** @description The replacement API Token with its stable UUID, new token value, and hash */
       200: {
         content: {
           'application/json': {
+            /**
+             * @description The database ID of the new API token
+             * @default
+             */
+            id: string
             /**
              * Format: uuid
-             * @description ID of the Socket user who initiated the rotation, if available
+             * @description The stable group UUID (unchanged after rotation)
+             * @default
+             */
+            group_uuid: string
+            /**
+             * Format: uuid
+             * @description ID of the Socket user who created the API Token
              * @default
              */
             created_by: string | null
             /** @default */
             token: string
+            /** @default */
+            hash: string
           }
         }
       }
@@ -14413,12 +15029,20 @@ export interface operations {
         org_slug: string
       }
     }
-    /** @description The token to revoke. */
+    /** @description The API token identifier to revoke. Provide uuid (recommended), token, or hash. May provide uuid+hash together for validation. */
     requestBody?: {
       content: {
         'application/json': {
+          /**
+           * Format: uuid
+           * @description The stable group UUID of the API token to revoke
+           * @default
+           */
+          uuid?: string
           /** @default */
-          token: string
+          token?: string
+          /** @default */
+          hash?: string
         }
       }
     }
@@ -14540,6 +15164,8 @@ export interface operations {
           | 'vscode'
           | 'pypi'
           | 'gem'
+          | 'socket'
+          | 'swift'
       }
     }
     responses: {
@@ -14553,6 +15179,8 @@ export interface operations {
               /** @default */
               updatedAt?: string
               /** @default */
+              publishedAt?: string | null
+              /** @default */
               description?: string
               /** @default 0 */
               id?: number
@@ -14650,6 +15278,8 @@ export interface operations {
           | 'vscode'
           | 'pypi'
           | 'gem'
+          | 'socket'
+          | 'swift'
       }
       path: {
         /** @description The slug of the organization */
@@ -14667,6 +15297,8 @@ export interface operations {
               /** @default */
               updatedAt?: string
               /** @default */
+              publishedAt?: string | null
+              /** @default */
               description?: string
               /** @default 0 */
               id?: number
@@ -14703,12 +15335,209 @@ export interface operations {
       429: components['responses']['SocketTooManyRequestsResponse']
     }
   }
+  /**
+   * Get Packages by PURL (Org Scoped)
+   * @description Batch retrieval of package metadata and alerts by PURL strings for a specific organization. Compatible with CycloneDX reports.
+   *
+   * Package URLs (PURLs) are an ecosystem agnostic way to identify packages.
+   * CycloneDX SBOMs use the purl format to identify components.
+   * This endpoint supports fetching metadata and alerts for multiple packages at once by passing an array of purl strings, or by passing an entire CycloneDX report.
+   *
+   * **Note:** This endpoint has a batch size limit (default: 1024 PURLs per request). Requests exceeding this limit will return a 400 Bad Request error.
+   *
+   * More information on purl and CycloneDX:
+   *
+   * - [`purl` Spec](https://github.com/package-url/purl-spec)
+   * - [CycloneDX Spec](https://cyclonedx.org/specification/overview/#components)
+   *
+   * This endpoint returns the latest available alert data for artifacts in the batch (stale while revalidate).
+   * Actively running analysis will be returned when available on subsequent runs.
+   *
+   * ## Query Parameters
+   *
+   * This endpoint supports all query parameters from `POST /v0/purl` including: `alerts`, `actions`, `compact`, `fixable`, `licenseattrib`, `licensedetails`, `purlErrors`, `cachedResultsOnly`, and `summary`.
+   *
+   * Additionally, you may provide a `labels` query parameter to apply a repository label's security policies. Pass the label slug as the value (e.g., `?labels=production`). Only one label is currently supported.
+   *
+   * ## Examples:
+   *
+   * ### Looking up an npm package:
+   *
+   * ```json
+   * {
+   *   "components": [
+   *     {
+   *       "purl": "pkg:npm/express@4.19.2"
+   *     }
+   *   ]
+   * }
+   * ```
+   *
+   * ### Looking up a PyPi package:
+   *
+   * ```json
+   * {
+   *   "components": [
+   *     {
+   *       "purl": "pkg:pypi/django@5.0.6"
+   *     }
+   *   ]
+   * }
+   * ```
+   *
+   * ### Looking up a Maven package:
+   *
+   * ```json
+   * {
+   *   "components": [
+   *     {
+   *       "purl": "pkg:maven/log4j/log4j@1.2.17"
+   *     }
+   *   ]
+   * }
+   * ```
+   *
+   * ### Batch lookup
+   *
+   * ```json
+   * {
+   *   "components": [
+   *     {
+   *       "purl": "pkg:npm/express@4.19.2"
+   *     },
+   *     {
+   *       "purl": "pkg:pypi/django@5.0.6"
+   *     },
+   *     {
+   *       "purl": "pkg:maven/log4j/log4j@1.2.17"
+   *     }
+   *   ]
+   * }
+   * ```
+   *
+   * ### With label and options (query parameters):
+   *
+   * ```
+   * POST /v0/orgs/{org_slug}/purl?labels=production&alerts=true&compact=true
+   * {
+   *   "components": [
+   *     {
+   *       "purl": "pkg:npm/express@4.19.2"
+   *     }
+   *   ]
+   * }
+   * ```
+   *
+   * This endpoint consumes 100 units of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - packages:list
+   */
+  batchPackageFetchByOrg: {
+    parameters: {
+      query?: {
+        /** @description Repository label slugs to apply policies. Only one label is supported currently; the parameter is an array to allow future support for multiple labels. */
+        labels?: string[]
+        /** @description Include alert metadata. */
+        alerts?: boolean
+        /** @description Include only alerts with comma separated actions defined by security policy. */
+        actions?: Array<'error' | 'monitor' | 'warn' | 'ignore'>
+        /** @description Compact metadata. When enabled, excludes metadata fields like author, scores, size, dependencies, and manifest files. Always includes: id, type, name, version, release, namespace, subpath, alerts, and alertPriorities. */
+        compact?: boolean
+        /** @description Include only fixable alerts. */
+        fixable?: boolean
+        /** @description Include license attribution data, including license text and author information. Maps attribution/license text to a list of data objects to which that attribution info applies. */
+        licenseattrib?: boolean
+        /** @description Include detailed license information, including location and match strength, for each license datum. */
+        licensedetails?: boolean
+        /** @description Return errors found with handling PURLs as error objects in the stream. */
+        purlErrors?: boolean
+        /** @description Return only cached results, do not attempt to scan new artifacts or rescan stale results. */
+        cachedResultsOnly?: boolean
+        /** @description Include a summary object at the end of the stream with counts of malformed, resolved, and not found PURLs. */
+        summary?: boolean
+      }
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+      }
+    }
+    requestBody?: {
+      content: {
+        'application/json': components['schemas']['SocketOrgBatchPURLFetch']
+      }
+    }
+    responses: {
+      /** @description Socket issue lists and scores for all packages, and optional metadata objects */
+      200: {
+        content: {
+          'application/x-ndjson': components['schemas']['BatchPurlStreamSchema']
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      404: components['responses']['SocketNotFoundResponse']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
   /**
    * Fetch fixes for vulnerabilities in a repository or scan
    * @description Fetches available fixes for vulnerabilities in a repository or scan.
    * Requires either repo_slug or full_scan_id as well as vulnerability_ids to be provided.
    * vulnerability_ids can be a comma-separated list of GHSA or CVE IDs, or "*" for all vulnerabilities.
    *
+   * ## Response Structure
+   *
+   * The response contains a `fixDetails` object where each key is a vulnerability ID (GHSA or CVE) and the value is a discriminated union based on the `type` field.
+   *
+   * ### Common Fields
+   *
+   * All response variants include:
+   * - `type`: Discriminator field (one of: "fixFound", "partialFixFound", "noFixAvailable", "fixNotApplicable", "errorComputingFix")
+   * - `value`: Object containing the variant-specific data
+   *
+   * The `value` object always contains:
+   * - `ghsa`: string | null - The GHSA ID
+   * - `cve`: string | null - The CVE ID (if available)
+   * - `advisoryDetails`: object | null - Advisory details (only if include_details=true)
+   *
+   * ### Response Variants
+   *
+   * **fixFound**: A complete fix is available for all vulnerable packages
+   * - `value.fixDetails.fixes`: Array of fix objects, each containing:
+   *   - `purl`: Package URL to upgrade
+   *   - `fixedVersion`: Version to upgrade to
+   *   - `manifestFiles`: Array of manifest files containing the package
+   *   - `updateType`: "patch" | "minor" | "major" | "unknown"
+   * - `value.fixDetails.responsibleDirectDependencies`: (optional) Map of direct dependencies responsible for the vulnerability
+   *
+   * **partialFixFound**: Fixes available for some but not all vulnerable packages
+   * - Same as fixFound, plus:
+   * - `value.fixDetails.unfixablePurls`: Array of packages that cannot be fixed, each containing:
+   *   - `purl`: Package URL
+   *   - `manifestFiles`: Array of manifest files
+   *
+   * **noFixAvailable**: No fix exists for this vulnerability (no patched version published)
+   *
+   * **fixNotApplicable**: A fix exists but cannot be applied due to version constraints
+   * - `value.vulnerableArtifacts`: Array of vulnerable packages with their manifest files
+   *
+   * **errorComputingFix**: An error occurred while computing fixes
+   * - `value.message`: Error description
+   *
+   * ### Advisory Details (when include_details=true)
+   *
+   * - `title`: string | null
+   * - `description`: string | null
+   * - `cwes`: string[] - CWE identifiers
+   * - `severity`: "LOW" | "MODERATE" | "HIGH" | "CRITICAL"
+   * - `cvssVector`: string | null
+   * - `publishedAt`: string (ISO date)
+   * - `kev`: boolean - Whether it's a Known Exploited Vulnerability
+   * - `epss`: number | null - Exploit Prediction Scoring System score
+   * - `affectedPurls`: Array of affected packages with version ranges
+   *
    * This endpoint consumes 10 units of your quota.
    *
    * This endpoint requires the following org token scopes:
@@ -14742,385 +15571,8 @@ export interface operations {
       200: {
         content: {
           'application/json': {
-            /** @description Map of vulnerability IDs (GHSA or CVE) to their fix details. Each entry contains information about available fixes, partial fixes, or reasons why fixes are not available. */
             fixDetails: {
-              [key: string]:
-                | {
-                    /** @enum {string} */
-                    type: 'fixFound'
-                    value: {
-                      /**
-                       * @default fixFound
-                       * @enum {string}
-                       */
-                      type: 'fixFound'
-                      /** @default */
-                      ghsa: string
-                      /** @default */
-                      cve: string | null
-                      fixDetails: {
-                        fixes: Array<{
-                          /** @default The PURL (unique package identifier) of the package to upgrade */
-                          purl: string
-                          /** @default The version of the package to upgrade to */
-                          fixedVersion: string
-                          manifestFiles: string[]
-                          /**
-                           * @description The type of version update (patch, minor, major, or unknown if it cannot be determined)
-                           * @default unknown
-                           * @enum {string}
-                           */
-                          updateType: 'patch' | 'minor' | 'major' | 'unknown'
-                        }>
-                        /** @description The keys are the PURL (unique package identifier) of the direct dependency(ies) responsible for introducing the vulnerability. */
-                        responsibleDirectDependencies?: {
-                          [key: string]: {
-                            /**
-                             * Format: The current version of the package
-                             * @default
-                             */
-                            currentVersion: string
-                            nextAvailableVersion?: {
-                              /**
-                               * Format: The next available version of the package
-                               * @default
-                               */
-                              version: string
-                              /**
-                               * @description The type of version update (patch, minor, major, or unknown if it cannot be determined)
-                               * @default unknown
-                               * @enum {string}
-                               */
-                              updateType:
-                                | 'patch'
-                                | 'minor'
-                                | 'major'
-                                | 'unknown'
-                            } | null
-                            /** @description The version and update type of the package that is necessary to fix the vulnerability. If the value is null, it means the package does not have to be upgraded to fix the vulnerability */
-                            fixByUpgradingTo?: {
-                              /** @default */
-                              version: string
-                              /**
-                               * @description The type of version update (patch, minor, major, or unknown if it cannot be determined)
-                               * @default unknown
-                               * @enum {string}
-                               */
-                              updateType:
-                                | 'patch'
-                                | 'minor'
-                                | 'major'
-                                | 'unknown'
-                            } | null
-                          }
-                        } | null
-                      }
-                      advisoryDetails: {
-                        /** @default */
-                        title?: string | null
-                        /** @default */
-                        description?: string | null
-                        cwes?: string[]
-                        /**
-                         * @description Severity level of the vulnerability
-                         * @default LOW
-                         * @enum {string}
-                         */
-                        severity?: 'LOW' | 'MODERATE' | 'HIGH' | 'CRITICAL'
-                        /** @default */
-                        cvssVector?: string | null
-                        /** @default */
-                        publishedAt?: string
-                        /**
-                         * @description Whether the vulnerability is a Known Exploited Vulnerability
-                         * @default false
-                         */
-                        kev?: boolean
-                        /**
-                         * @description Exploit Prediction Scoring System score
-                         * @default 0
-                         */
-                        epss?: number | null
-                        affectedPurls?: Array<{
-                          /**
-                           * Format: The PURL (unique package identifier) of the affected package
-                           * @default
-                           */
-                          purl: string
-                          /** @default The range of vulnerable versions */
-                          affectedRange: string
-                        }>
-                      } | null
-                    }
-                  }
-                | {
-                    /** @enum {string} */
-                    type: 'partialFixFound'
-                    value: {
-                      /**
-                       * @default partialFixFound
-                       * @enum {string}
-                       */
-                      type: 'partialFixFound'
-                      /** @default */
-                      ghsa: string
-                      /** @default */
-                      cve: string | null
-                      fixDetails: {
-                        fixes: Array<{
-                          /** @default The PURL (unique package identifier) of the package to upgrade */
-                          purl: string
-                          /** @default The version of the package to upgrade to */
-                          fixedVersion: string
-                          manifestFiles: string[]
-                          /**
-                           * @description The type of version update (patch, minor, major, or unknown if it cannot be determined)
-                           * @default unknown
-                           * @enum {string}
-                           */
-                          updateType: 'patch' | 'minor' | 'major' | 'unknown'
-                        }>
-                        unfixablePurls: Array<{
-                          /** @default The PURL (unique package identifier) of the package that cannot be upgraded */
-                          purl: string
-                          manifestFiles: string[]
-                        }>
-                        /** @description The keys are the PURL (unique package identifier) of the direct dependency(ies) responsible for introducing the vulnerability. */
-                        responsibleDirectDependencies?: {
-                          [key: string]: {
-                            /**
-                             * Format: The current version of the package
-                             * @default
-                             */
-                            currentVersion: string
-                            nextAvailableVersion?: {
-                              /**
-                               * Format: The next available version of the package
-                               * @default
-                               */
-                              version: string
-                              /**
-                               * @description The type of version update (patch, minor, major, or unknown if it cannot be determined)
-                               * @default unknown
-                               * @enum {string}
-                               */
-                              updateType:
-                                | 'patch'
-                                | 'minor'
-                                | 'major'
-                                | 'unknown'
-                            } | null
-                            /** @description The version and update type of the package that is necessary to fix the vulnerability. If the value is null, it means the package does not have to be upgraded to fix the vulnerability */
-                            fixByUpgradingTo?: {
-                              /** @default */
-                              version: string
-                              /**
-                               * @description The type of version update (patch, minor, major, or unknown if it cannot be determined)
-                               * @default unknown
-                               * @enum {string}
-                               */
-                              updateType:
-                                | 'patch'
-                                | 'minor'
-                                | 'major'
-                                | 'unknown'
-                            } | null
-                          }
-                        } | null
-                      }
-                      advisoryDetails: {
-                        /** @default */
-                        title?: string | null
-                        /** @default */
-                        description?: string | null
-                        cwes?: string[]
-                        /**
-                         * @description Severity level of the vulnerability
-                         * @default LOW
-                         * @enum {string}
-                         */
-                        severity?: 'LOW' | 'MODERATE' | 'HIGH' | 'CRITICAL'
-                        /** @default */
-                        cvssVector?: string | null
-                        /** @default */
-                        publishedAt?: string
-                        /**
-                         * @description Whether the vulnerability is a Known Exploited Vulnerability
-                         * @default false
-                         */
-                        kev?: boolean
-                        /**
-                         * @description Exploit Prediction Scoring System score
-                         * @default 0
-                         */
-                        epss?: number | null
-                        affectedPurls?: Array<{
-                          /**
-                           * Format: The PURL (unique package identifier) of the affected package
-                           * @default
-                           */
-                          purl: string
-                          /** @default The range of vulnerable versions */
-                          affectedRange: string
-                        }>
-                      } | null
-                    }
-                  }
-                | {
-                    /** @enum {string} */
-                    type: 'errorComputingFix'
-                    value: {
-                      /**
-                       * @default errorComputingFix
-                       * @enum {string}
-                       */
-                      type: 'errorComputingFix'
-                      /** @default */
-                      ghsa: string | null
-                      /** @default */
-                      cve: string | null
-                      /** @default */
-                      message: string
-                      advisoryDetails: {
-                        /** @default */
-                        title?: string | null
-                        /** @default */
-                        description?: string | null
-                        cwes?: string[]
-                        /**
-                         * @description Severity level of the vulnerability
-                         * @default LOW
-                         * @enum {string}
-                         */
-                        severity?: 'LOW' | 'MODERATE' | 'HIGH' | 'CRITICAL'
-                        /** @default */
-                        cvssVector?: string | null
-                        /** @default */
-                        publishedAt?: string
-                        /**
-                         * @description Whether the vulnerability is a Known Exploited Vulnerability
-                         * @default false
-                         */
-                        kev?: boolean
-                        /**
-                         * @description Exploit Prediction Scoring System score
-                         * @default 0
-                         */
-                        epss?: number | null
-                        affectedPurls?: Array<{
-                          /**
-                           * Format: The PURL (unique package identifier) of the affected package
-                           * @default
-                           */
-                          purl: string
-                          /** @default The range of vulnerable versions */
-                          affectedRange: string
-                        }>
-                      } | null
-                    }
-                  }
-                | {
-                    /** @enum {string} */
-                    type: 'noFixAvailable'
-                    value: {
-                      /**
-                       * @default noFixAvailable
-                       * @enum {string}
-                       */
-                      type: 'noFixAvailable'
-                      /** @default */
-                      ghsa: string
-                      /** @default */
-                      cve: string | null
-                      advisoryDetails: {
-                        /** @default */
-                        title?: string | null
-                        /** @default */
-                        description?: string | null
-                        cwes?: string[]
-                        /**
-                         * @description Severity level of the vulnerability
-                         * @default LOW
-                         * @enum {string}
-                         */
-                        severity?: 'LOW' | 'MODERATE' | 'HIGH' | 'CRITICAL'
-                        /** @default */
-                        cvssVector?: string | null
-                        /** @default */
-                        publishedAt?: string
-                        /**
-                         * @description Whether the vulnerability is a Known Exploited Vulnerability
-                         * @default false
-                         */
-                        kev?: boolean
-                        /**
-                         * @description Exploit Prediction Scoring System score
-                         * @default 0
-                         */
-                        epss?: number | null
-                        affectedPurls?: Array<{
-                          /**
-                           * Format: The PURL (unique package identifier) of the affected package
-                           * @default
-                           */
-                          purl: string
-                          /** @default The range of vulnerable versions */
-                          affectedRange: string
-                        }>
-                      } | null
-                    }
-                  }
-                | {
-                    /** @enum {string} */
-                    type: 'fixNotApplicable'
-                    value: {
-                      /**
-                       * @default fixNotApplicable
-                       * @enum {string}
-                       */
-                      type: 'fixNotApplicable'
-                      /** @default */
-                      ghsa: string
-                      /** @default */
-                      cve: string | null
-                      advisoryDetails: {
-                        /** @default */
-                        title?: string | null
-                        /** @default */
-                        description?: string | null
-                        cwes?: string[]
-                        /**
-                         * @description Severity level of the vulnerability
-                         * @default LOW
-                         * @enum {string}
-                         */
-                        severity?: 'LOW' | 'MODERATE' | 'HIGH' | 'CRITICAL'
-                        /** @default */
-                        cvssVector?: string | null
-                        /** @default */
-                        publishedAt?: string
-                        /**
-                         * @description Whether the vulnerability is a Known Exploited Vulnerability
-                         * @default false
-                         */
-                        kev?: boolean
-                        /**
-                         * @description Exploit Prediction Scoring System score
-                         * @default 0
-                         */
-                        epss?: number | null
-                        affectedPurls?: Array<{
-                          /**
-                           * Format: The PURL (unique package identifier) of the affected package
-                           * @default
-                           */
-                          purl: string
-                          /** @default The range of vulnerable versions */
-                          affectedRange: string
-                        }>
-                      } | null
-                    }
-                  }
+              [key: string]: Record<string, never>
             }
           }
         }
@@ -15671,10 +16123,34 @@ export interface operations {
         'filters.alertAction'?: string
         /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be excluded */
         'filters.alertAction.notIn'?: string
+        /** @description Comma-separated list of alert action source types ("fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be included */
+        'filters.alertActionSourceType'?: string
+        /** @description Comma-separated list of alert action source types ("fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be excluded */
+        'filters.alertActionSourceType.notIn'?: string
         /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be included */
         'filters.alertCategory'?: string
         /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be excluded */
         'filters.alertCategory.notIn'?: string
+        /** @description Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertClearedAt.eq'?: string
+        /** @description Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertClearedAt.lt'?: string
+        /** @description Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertClearedAt.lte'?: string
+        /** @description Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertClearedAt.gt'?: string
+        /** @description Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertClearedAt.gte'?: string
+        /** @description Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertCreatedAt.eq'?: string
+        /** @description Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertCreatedAt.lt'?: string
+        /** @description Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertCreatedAt.lte'?: string
+        /** @description Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertCreatedAt.gt'?: string
+        /** @description Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+        'filters.alertCreatedAt.gte'?: string
         /** @description CVE ID */
         'filters.alertCveId'?: string
         /** @description CVE ID */
@@ -15707,6 +16183,10 @@ export interface operations {
         'filters.alertPriority'?: string
         /** @description Alert priority ("low", "medium", "high", or "critical") */
         'filters.alertPriority.notIn'?: string
+        /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be included */
+        'filters.alertReachabilityAnalysisType'?: string
+        /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be excluded */
+        'filters.alertReachabilityAnalysisType.notIn'?: string
         /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be included */
         'filters.alertReachabilityType'?: string
         /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be excluded */
@@ -15733,6 +16213,26 @@ export interface operations {
         'filters.alertUpdatedAt.gt'?: string
         /** @description Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
         'filters.alertUpdatedAt.gte'?: string
+        /** @description Name of artifact */
+        'filters.artifactName'?: string
+        /** @description Name of artifact */
+        'filters.artifactName.notIn'?: string
+        /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be included */
+        'filters.artifactType'?: string
+        /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be excluded */
+        'filters.artifactType.notIn'?: string
+        /** @description Dead/reachable dependency filter flag */
+        'filters.dependencyDead'?: boolean
+        /** @description Dead/reachable dependency filter flag */
+        'filters.dependencyDead.notIn'?: boolean
+        /** @description Development/production dependency filter flag */
+        'filters.dependencyDev'?: boolean
+        /** @description Development/production dependency filter flag */
+        'filters.dependencyDev.notIn'?: boolean
+        /** @description Direct/transitive dependency filter flag */
+        'filters.dependencyDirect'?: boolean
+        /** @description Direct/transitive dependency filter flag */
+        'filters.dependencyDirect.notIn'?: boolean
         /** @description Comma-separated list of repo full names that should be included */
         'filters.repoFullName'?: string
         /** @description Comma-separated list of repo full names that should be excluded */
@@ -15752,7 +16252,7 @@ export interface operations {
       }
     }
     responses: {
-      /** @description The paginated array of API tokens for the organization, and related metadata. */
+      /** @description The paginated array of alert items for the organization and related metadata. */
       200: {
         content: {
           'application/json': {
@@ -15807,6 +16307,8 @@ export interface operations {
               clearedAt: string | null
               /** @default */
               dashboardUrl: string
+              /** @default */
+              title: string
               /**
                * @default low
                * @enum {string}
@@ -15913,10 +16415,34 @@ export interface operations {
                 alertAction?: string[]
                 /** @description Comma-separated list of alert actions ("error", "warn", "monitor", or "ignore) that should be excluded */
                 'alertAction.notIn'?: string[]
+                /** @description Comma-separated list of alert action source types ("fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be included */
+                alertActionSourceType?: string[]
+                /** @description Comma-separated list of alert action source types ("fallback", "injected-alert", "org-policy", "reachability", "repo-label-policy", "socket-yml", or "triage") that should be excluded */
+                'alertActionSourceType.notIn'?: string[]
                 /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be included */
                 alertCategory?: string[]
                 /** @description Comma-separated list of alert categories ("supplyChainRisk", "maintenance", "quality", "license", or "vulnerability") that should be excluded */
                 'alertCategory.notIn'?: string[]
+                /** @description Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertClearedAt.eq'?: string[]
+                /** @description Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertClearedAt.lt'?: string[]
+                /** @description Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertClearedAt.lte'?: string[]
+                /** @description Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertClearedAt.gt'?: string[]
+                /** @description Alert cleared at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertClearedAt.gte'?: string[]
+                /** @description Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertCreatedAt.eq'?: string[]
+                /** @description Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertCreatedAt.lt'?: string[]
+                /** @description Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertCreatedAt.lte'?: string[]
+                /** @description Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertCreatedAt.gt'?: string[]
+                /** @description Alert created at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
+                'alertCreatedAt.gte'?: string[]
                 /** @description CVE ID */
                 alertCveId?: string[]
                 /** @description CVE ID */
@@ -15947,6 +16473,10 @@ export interface operations {
                 alertPriority?: string[]
                 /** @description Alert priority ("low", "medium", "high", or "critical") */
                 'alertPriority.notIn'?: string[]
+                /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be included */
+                alertReachabilityAnalysisType?: string[]
+                /** @description Comma-separated list of alert CVE reachability analysis types ("full-scan" or "precomputed") that should be excluded */
+                'alertReachabilityAnalysisType.notIn'?: string[]
                 /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be included */
                 alertReachabilityType?: string[]
                 /** @description Comma-separated list of alert CVE reachability types ("direct_dependency", "error", "maybe_reachable", "missing_support", "pending", "reachable", "undeterminable_reachability", "unknown", or "unreachable") that should be excluded */
@@ -15973,6 +16503,20 @@ export interface operations {
                 'alertUpdatedAt.gt'?: string[]
                 /** @description Alert updated at (YYYY-MM-DD HH:MM:SS in UTC time zone) */
                 'alertUpdatedAt.gte'?: string[]
+                /** @description Name of artifact */
+                artifactName?: string[]
+                /** @description Name of artifact */
+                'artifactName.notIn'?: string[]
+                /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be included */
+                artifactType?: string[]
+                /** @description Comma-separated list of artifact types (e.g. "npm", "pypi", "gem", "maven", "golang", etc.) that should be excluded */
+                'artifactType.notIn'?: string[]
+                /** @description Dead/reachable dependency filter flag */
+                dependencyDead?: boolean[]
+                /** @description Development/production dependency filter flag */
+                dependencyDev?: boolean[]
+                /** @description Direct/transitive dependency filter flag */
+                dependencyDirect?: boolean[]
                 /** @description Comma-separated list of repo full names that should be included */
                 repoFullName?: string[]
                 /** @description Comma-separated list of repo full names that should be excluded */
@@ -15996,6 +16540,95 @@ export interface operations {
       429: components['responses']['SocketTooManyRequestsResponse']
     }
   }
+  /**
+   * List full scans associated with alert (Beta)
+   * @description List full scans associated with alert.
+   *
+   * This endpoint consumes 10 units of your quota.
+   *
+   * This endpoint requires the following org token scopes:
+   * - alerts:list
+   */
+  alertFullScans: {
+    parameters: {
+      query: {
+        /** @description Specify the maximum number of items to return per page (intermediate pages may have fewer than this limit and callers should always check "endCursor" in response body to know if there are more pages) */
+        per_page?: number
+        /** @description The pagination cursor that was returned as the "endCursor" property in previous request */
+        startAfterCursor?: string
+        /** @description One or more alert keys for which to find associated full scans */
+        alertKey: string
+        /** @description The number of days of data to fetch as an offset from current date (e.g. "-7d" for past 7 days) */
+        range?: string
+      }
+      path: {
+        /** @description The slug of the organization */
+        org_slug: string
+      }
+    }
+    responses: {
+      /** @description The paginated array of full scans associated with alert for the organization and related metadata. */
+      200: {
+        content: {
+          'application/json': {
+            /** @default */
+            endCursor: string | null
+            items: Array<{
+              /**
+               * @description ID of full scan
+               * @default
+               */
+              fullScanId: string
+              /** @default */
+              branchName: string | null
+              /**
+               * @description Type of branch that was scanned
+               * @default
+               * @enum {string}
+               */
+              branchType:
+                | 'default'
+                | 'non-default'
+                | 'tracked'
+                | 'untracked'
+                | ''
+              /**
+               * @description Full name of repo which contains repo workspace and repo slug
+               * @default
+               */
+              repoFullName: string | null
+              /**
+               * @description ISO date when SBOM was created
+               * @default
+               */
+              sbomCreatedAt: string
+              /**
+               * @description ISO date when SBOM was scanned
+               * @default
+               */
+              scannedAt: string
+              alertKeys: string[]
+            }>
+            meta: {
+              /** @default */
+              organizationId: string
+              alertKeys: string[]
+              /** @default 0 */
+              queryStartTimestamp: number
+              /** @default */
+              startDateInclusive: string
+              /** @default */
+              endDateInclusive: string
+            }
+          }
+        }
+      }
+      400: components['responses']['SocketBadRequest']
+      401: components['responses']['SocketUnauthorized']
+      403: components['responses']['SocketForbidden']
+      429: components['responses']['SocketTooManyRequestsResponse']
+    }
+  }
   /**
    * License Policy (Beta)
    * @description Compare the license data found for a list of packages (given as PURL strings) with the contents of a configurable license policy,