List attestations for criteria
List attestations matching a search criteria within an organization.
This endpoint returns a dictionary mapping commit SHAs to lists of attestations. Each attestation contains metadata about compliance, timing, and type-specific data.
commit_list is required; it scopes the search to a specific set of commits.
attestation_type, attestation_name, and flow_name further narrow results
within that commit set but cannot be used on their own.
Usage Examples
Get all attestations for a list of commits
GET /attestations/my-org/list_attestations_for_criteria?commit_list=ae08fc6a5c963ae8dfaa0c27d8e5de9980d433b6
Narrow by flow and attestation type
GET /attestations/my-org/list_attestations_for_criteria?commit_list=ae08fc6a5c963ae8dfaa0c27d8e5de9980d433b6&flow_name=production-flow&attestation_type=snyk
Narrow by attestation name
GET /attestations/my-org/list_attestations_for_criteria?commit_list=ae08fc6a5c963ae8dfaa0c27d8e5de9980d433b6&attestation_name=manual-test
Narrow by custom attestation type
GET /attestations/my-org/list_attestations_for_criteria?commit_list=ae08fc6a5c963ae8dfaa0c27d8e5de9980d433b6&attestation_type=custom:security-scan
Documentation Index
Fetch the complete documentation index at: https://docs.kosli.com/llms.txt
Use this file to discover all available pages before exploring further.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
Query Parameters
The flow name to search for attestations in
The commit list that the attestations are associated with
^[a-f0-9]{40}$The attestation name to search for
The attestation ID to search for. Not yet supported on this endpoint — currently ignored.
The attestation type to search for. Use built-in types (e.g., 'junit') or 'custom:' for custom types.
Response
Successfully retrieved attestations
Response model for listing attestations by commit.
This model represents a dictionary mapping commit SHAs to lists of attestations. Each attestation can be of different types (generic, junit, snyk, pull_request, jira, sonar, custom).