# GraphQL query endpoint for attestations

Endpoint: POST /gateway/ssca-manager/v2/orgs/{org}/projects/{project}/attestations/query
Version: 1.0
Security: x-api-key

## Path parameters:

  - `org` (string, required)
    Harness organization ID

  - `project` (string, required)
    Harness project ID

## Header parameters:

  - `Harness-Account` (string, required)
    Identifier field of the account the resource is scoped to. This is required for Authorization methods other than the x-api-key header. If you are using the x-api-key header, this can be skipped.

## Request fields (application/json):

  - `query` (string, required)
    GraphQL query string
    Example: "{ dsses(first:10) { edges { node { gitoidSha256 } } } }"

  - `variables` (object)
    GraphQL variables for filtering DSS entries

  - `variables.gitoidSha256` (string)
    Exact match on attestation ID

  - `variables.gitoidSha256In` (array)
    Match any ID in list

  - `variables.subjectName` (string)
    Exact match on subject name

  - `variables.subjectNameContains` (string)
    Wildcard contains search

  - `variables.subjectNameStartsWith` (string)
    Prefix search

  - `variables.subjectSha256` (string)
    Exact match on subject digest

  - `variables.signerKeyId` (string)
    Exact match on signer key ID

  - `variables.signerKeyIdIn` (array)
    Match any key ID in list

  - `variables.status` (string)
    Filter by status (PENDING, INDEXED, etc.)

  - `variables.verified` (boolean)
    Filter by verification status

  - `variables.artifactId` (string)
    Filter by artifact ID

  - `variables.createdAtGTE` (integer)
    Created after timestamp (epoch ms)

  - `variables.createdAtLTE` (integer)
    Created before timestamp (epoch ms)

  - `variables.and` (array)
    Logical AND of multiple filter conditions

  - `variables.or` (array)
    Logical OR of multiple filter conditions

  - `variables.not` (object)
    Logical NOT filter condition

## Response 200 fields (application/json):

  - `data` (object)
    GraphQL response data

  - `errors` (array)
    GraphQL errors if any

  - `errors.message` (string)
    Error message

  - `errors.locations` (array)

  - `errors.locations.line` (integer)

  - `errors.locations.column` (integer)

  - `errors.path` (array)


## Response 400 fields

## Response 401 fields

## Response 500 fields