Skip to content

Request an autofix

POST
/v1/autofix/jobs
curl --request POST \
--url https://api.devsecure.io/v1/autofix/jobs \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{ "issue_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "target_branch": "example", "confirm_pr": false }'

Queues an AI fix for an issue from a GitHub, GitLab or Bitbucket scan, following the workspace’s remediation policy (detect-only refuses; manual-pr needs confirm_pr=true).

Idempotency-Key
string
<= 255 characters /^[A-Za-z0-9_\-:.]{1,255}$/

Makes the request safe to retry for 24 hours. Same key and same request: the first response is replayed. Same key, different request: 409 idempotency_conflict.

Media typeapplication/json
AutofixCreate
object
issue_id
required
Issue Id
string format: uuid
target_branch
Any of:
string
<= 255 characters
confirm_pr
Confirm Pr

Required true when the policy is manual-pr.

boolean

Accepted.

Media typeapplication/json
AutofixJob
object
id
required
Id
string format: uuid
status
required
Status
string
Allowed values: queued running completed low_confidence cannot_fix failed unknown
remediation_status
Any of:
string
Allowed values: fixed cannot_fix escalated
issue_id
Any of:
string format: uuid
scan_id
Any of:
string
repository
Any of:
ScanRepository
object
id
required
Id
string
provider
required
Provider
string
Allowed values: github gitlab bitbucket container
name
required
Name
string
target_branch
Any of:
string
fix_branch
Any of:
string
pull_request
Any of:
PullRequest
object
url
Any of:
string
number
Any of:
integer
finding
required
AutofixFinding
object
title
Any of:
string
severity
Any of:
string
Allowed values: critical high medium low info
cve
Any of:
string
file_path
Any of:
string
scores
required
AutofixScores
object
priority
Any of:
integer
remediation_safety
Any of:
integer
calibrated_confidence
Any of:
number
low_confidence
Any of:
boolean
cannot_fix_reason
Any of:
string
created_at
Any of:
string
started_at
Any of:
string
completed_at
Any of:
string
Example
{
"status": "queued",
"remediation_status": "fixed",
"repository": {
"id": "repo_3f9a0c2d4b1e8f7a6c5d4e3f",
"provider": "github",
"name": "acme/payments-api"
},
"finding": {
"severity": "critical"
}
}
X-Request-ID
string

Identifies the request; quote it to support.

X-RateLimit-Limit
integer

Requests allowed per window.

X-RateLimit-Remaining
integer

Requests left in the window.

X-RateLimit-Reset
integer

Seconds until the window resets.

The request is not valid (validation_error, invalid_cursor).

Media typeapplication/json
ErrorEnvelope
object
error
required
ErrorBody
object
code
required
Code
string
message
required
Message
string
request_id
required
Any of:
string
details
Any of:
Array<object>
ErrorDetail
object
field
Any of:
string
message
required
Message
string
Example
{
"error": {
"code": "validation_error",
"message": "The request is not valid.",
"request_id": "req_3f0c2a9d5b6e4f7a8c1d2e3f4a5b6c7d"
}
}
X-Request-ID
string

Identifies the request; quote it to support.

Missing, unknown, expired or revoked credential (invalid_credentials).

Media typeapplication/json
ErrorEnvelope
object
error
required
ErrorBody
object
code
required
Code
string
message
required
Message
string
request_id
required
Any of:
string
details
Any of:
Array<object>
ErrorDetail
object
field
Any of:
string
message
required
Message
string
Example
{
"error": {
"code": "invalid_credentials",
"message": "The credential is missing, invalid, expired or revoked.",
"request_id": "req_3f0c2a9d5b6e4f7a8c1d2e3f4a5b6c7d"
}
}
X-Request-ID
string

Identifies the request; quote it to support.

The credential may not do this (insufficient_scope, permission_denied, plan_not_allowed, quota_exceeded, target_not_authorized).

Media typeapplication/json
ErrorEnvelope
object
error
required
ErrorBody
object
code
required
Code
string
message
required
Message
string
request_id
required
Any of:
string
details
Any of:
Array<object>
ErrorDetail
object
field
Any of:
string
message
required
Message
string
Example
{
"error": {
"code": "insufficient_scope",
"message": "The credential does not have the scope this operation needs.",
"request_id": "req_3f0c2a9d5b6e4f7a8c1d2e3f4a5b6c7d"
}
}
X-Request-ID
string

Identifies the request; quote it to support.

Conflicts with the current state or an earlier Idempotency-Key (conflict, idempotency_conflict).

Media typeapplication/json
ErrorEnvelope
object
error
required
ErrorBody
object
code
required
Code
string
message
required
Message
string
request_id
required
Any of:
string
details
Any of:
Array<object>
ErrorDetail
object
field
Any of:
string
message
required
Message
string
Example
{
"error": {
"code": "idempotency_conflict",
"message": "This Idempotency-Key was already used for a different request.",
"request_id": "req_3f0c2a9d5b6e4f7a8c1d2e3f4a5b6c7d"
}
}
X-Request-ID
string

Identifies the request; quote it to support.

Too many requests (rate_limited).

Media typeapplication/json
ErrorEnvelope
object
error
required
ErrorBody
object
code
required
Code
string
message
required
Message
string
request_id
required
Any of:
string
details
Any of:
Array<object>
ErrorDetail
object
field
Any of:
string
message
required
Message
string
Example
{
"error": {
"code": "rate_limited",
"message": "Too many requests. Retry after the time in Retry-After.",
"request_id": "req_3f0c2a9d5b6e4f7a8c1d2e3f4a5b6c7d"
}
}
X-Request-ID
string

Identifies the request; quote it to support.

X-RateLimit-Limit
integer

Requests allowed per window.

X-RateLimit-Remaining
integer

Requests left in the window.

X-RateLimit-Reset
integer

Seconds until the window resets.

Retry-After
integer

Seconds to wait before retrying.

Unexpected error (internal_error). Quote the request id to support.

Media typeapplication/json
ErrorEnvelope
object
error
required
ErrorBody
object
code
required
Code
string
message
required
Message
string
request_id
required
Any of:
string
details
Any of:
Array<object>
ErrorDetail
object
field
Any of:
string
message
required
Message
string
Example
{
"error": {
"code": "internal_error",
"message": "Something went wrong on our side.",
"request_id": "req_3f0c2a9d5b6e4f7a8c1d2e3f4a5b6c7d"
}
}
X-Request-ID
string

Identifies the request; quote it to support.

Not available yet in this deployment (not_implemented).

Media typeapplication/json
ErrorEnvelope
object
error
required
ErrorBody
object
code
required
Code
string
message
required
Message
string
request_id
required
Any of:
string
details
Any of:
Array<object>
ErrorDetail
object
field
Any of:
string
message
required
Message
string
Example
{
"error": {
"code": "not_implemented",
"message": "This operation is not available yet.",
"request_id": "req_3f0c2a9d5b6e4f7a8c1d2e3f4a5b6c7d"
}
}
X-Request-ID
string

Identifies the request; quote it to support.

A DevSecure service this operation needs did not answer (upstream_unavailable).

Media typeapplication/json
ErrorEnvelope
object
error
required
ErrorBody
object
code
required
Code
string
message
required
Message
string
request_id
required
Any of:
string
details
Any of:
Array<object>
ErrorDetail
object
field
Any of:
string
message
required
Message
string
Example
{
"error": {
"code": "upstream_unavailable",
"message": "A service this operation needs is unavailable. Try again later.",
"request_id": "req_3f0c2a9d5b6e4f7a8c1d2e3f4a5b6c7d"
}
}
X-Request-ID
string

Identifies the request; quote it to support.