> ## Documentation Index > Fetch the complete documentation index at: https://conductorone-leet-crowdstrike-iom-scopes.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # Get Run Provenance > GetRunProvenance explains a run: what it read, what its program looked at, and the program itself. A2UIService.GetSurfaceProvenance answers the same question for a surface, but needs a live one — and a rerun is headless, so a report would become less explainable every time it refreshed. ## OpenAPI ````yaml https://spec.speakeasy.com/conductor-one/conductorone/my-source-with-code-samples get /api/v1/reporting/reports/{id}/runs/{run_id}/provenance openapi: 3.1.0 info: description: The C1 API is a HTTP API for managing C1 resources. title: C1 API version: 0.1.0-alpha servers: - description: The C1 API server for the current tenant. url: https://{tenantDomain}.conductor.one variables: tenantDomain: default: example description: The domain of the tenant to use for this request. security: - bearerAuth: [] oauth: [] paths: /api/v1/reporting/reports/{id}/runs/{run_id}/provenance: get: tags: - Report summary: Get Run Provenance description: >- GetRunProvenance explains a run: what it read, what its program looked at, and the program itself. A2UIService.GetSurfaceProvenance answers the same question for a surface, but needs a live one — and a rerun is headless, so a report would become less explainable every time it refreshed. operationId: c1.api.reporting.v1.ReportingService.GetRunProvenance parameters: - in: path name: id required: true schema: description: The id field. type: string - in: path name: run_id required: true schema: description: The runId field. type: string responses: '200': content: application/json: schema: $ref: >- #/components/schemas/c1.api.reporting.v1.ReportingServiceGetRunProvenanceResponse description: Successful response components: schemas: c1.api.reporting.v1.ReportingServiceGetRunProvenanceResponse: description: The ReportingServiceGetRunProvenanceResponse message. properties: programCommitId: description: The programCommitId field. type: string programFunctionId: description: The programFunctionId field. type: string programInput: description: >- The parameters this run was bound to, as JSON. "{}" for a program that takes none — a real answer, distinct from absent. type: string programSource: description: The programSource field. type: string sources: description: >- What each part of the report shows, read off the run's own copy of the surface rather than a live one. items: $ref: '#/components/schemas/c1.api.a2ui.v1.A2UIProvenanceSource' type: - array - 'null' steps: description: What the program looked at, derived from its source. items: $ref: '#/components/schemas/c1.api.a2ui.v1.A2UIProvenanceStep' type: - array - 'null' stepsAvailable: description: >- False when the program's source could not be read, which is what makes an empty steps list mean "unknown" rather than "it read nothing". type: boolean title: Reporting Service Get Run Provenance Response type: object x-speakeasy-name-override: ReportingServiceGetRunProvenanceResponse c1.api.a2ui.v1.A2UIProvenanceSource: description: >- A2UIProvenanceSource is one self-reported source from a reporting component: what a chart or table says it was drawn from, and how many rows fed it. properties: componentId: description: The componentId field. type: string count: description: The count field. format: int64 type: string kind: description: The kind field. type: string label: description: The label field. type: string matchedToolCall: deprecated: true description: 'Deprecated: always empty. See verified.' type: string ref: description: The ref field. type: string verified: deprecated: true description: |- Deprecated: always false. Superseded by A2UIServiceGetSurfaceProvenanceResponse.steps, which reports what the program did rather than judging it. type: boolean title: A 2 Ui Provenance Source type: object x-speakeasy-name-override: A2UIProvenanceSource c1.api.a2ui.v1.A2UIProvenanceStep: description: >- A2UIProvenanceStep is one thing the report's program did. Steps are returned in the order the program performs them. properties: objects: description: >- The specific records this step named. Empty when the step names none, and withheld wholesale when step_objects_visible is false. items: $ref: '#/components/schemas/c1.api.a2ui.v1.A2UIProvenanceObject' type: - array - 'null' operation: description: The operation field. enum: - A2UI_PROVENANCE_OPERATION_UNSPECIFIED - A2UI_PROVENANCE_OPERATION_LOOKED_UP - A2UI_PROVENANCE_OPERATION_COUNTED - A2UI_PROVENANCE_OPERATION_FETCHED_RECORD - A2UI_PROVENANCE_OPERATION_SEARCHED - A2UI_PROVENANCE_OPERATION_READ_TREND - A2UI_PROVENANCE_OPERATION_CREATED - A2UI_PROVENANCE_OPERATION_UPDATED - A2UI_PROVENANCE_OPERATION_DELETED - A2UI_PROVENANCE_OPERATION_RAN_PROGRAM - A2UI_PROVENANCE_OPERATION_BUILT_REPORT type: string x-speakeasy-unknown-values: allow recordType: description: The recordType field. enum: - A2UI_PROVENANCE_RECORD_TYPE_UNSPECIFIED - A2UI_PROVENANCE_RECORD_TYPE_APP - A2UI_PROVENANCE_RECORD_TYPE_USER - A2UI_PROVENANCE_RECORD_TYPE_GRANT - A2UI_PROVENANCE_RECORD_TYPE_APP_ENTITLEMENT - A2UI_PROVENANCE_RECORD_TYPE_APP_USER - A2UI_PROVENANCE_RECORD_TYPE_APP_RESOURCE - A2UI_PROVENANCE_RECORD_TYPE_APP_RESOURCE_TYPE - A2UI_PROVENANCE_RECORD_TYPE_TASK - A2UI_PROVENANCE_RECORD_TYPE_POLICY - A2UI_PROVENANCE_RECORD_TYPE_CONNECTOR - A2UI_PROVENANCE_RECORD_TYPE_ACCESS_REVIEW - A2UI_PROVENANCE_RECORD_TYPE_ACCESS_REVIEW_TEMPLATE - A2UI_PROVENANCE_RECORD_TYPE_ACCESS_REVIEW_SELECTION - A2UI_PROVENANCE_RECORD_TYPE_CONFLICT_MONITOR - A2UI_PROVENANCE_RECORD_TYPE_ACCESS_VIOLATION - A2UI_PROVENANCE_RECORD_TYPE_REQUEST_CATALOG - A2UI_PROVENANCE_RECORD_TYPE_WEBHOOK - A2UI_PROVENANCE_RECORD_TYPE_DIRECTORY - A2UI_PROVENANCE_RECORD_TYPE_PROFILE_TYPE - A2UI_PROVENANCE_RECORD_TYPE_ROLE_BINDING - A2UI_PROVENANCE_RECORD_TYPE_AUTOMATION_EXECUTION - A2UI_PROVENANCE_RECORD_TYPE_AUTOMATION_EXECUTION_STEP - A2UI_PROVENANCE_RECORD_TYPE_FINDING - A2UI_PROVENANCE_RECORD_TYPE_METRIC - A2UI_PROVENANCE_RECORD_TYPE_AUTOMATION - A2UI_PROVENANCE_RECORD_TYPE_GRANT_HISTORY - A2UI_PROVENANCE_RECORD_TYPE_GRANT_REASON - A2UI_PROVENANCE_RECORD_TYPE_APP_OWNER type: string x-speakeasy-unknown-values: allow title: A 2 Ui Provenance Step type: object x-speakeasy-name-override: A2UIProvenanceStep c1.api.a2ui.v1.A2UIProvenanceObject: description: A2UIProvenanceObject names one record a step referred to by id. properties: displayName: description: >- Empty when the record's type has no name to resolve, or the record is gone. The id then stands alone rather than the whole row being dropped. type: string id: description: The id field. type: string recordType: description: >- Not always the step's own type: a step over grants can be narrowed to one app, and the app is the record worth naming. enum: - A2UI_PROVENANCE_RECORD_TYPE_UNSPECIFIED - A2UI_PROVENANCE_RECORD_TYPE_APP - A2UI_PROVENANCE_RECORD_TYPE_USER - A2UI_PROVENANCE_RECORD_TYPE_GRANT - A2UI_PROVENANCE_RECORD_TYPE_APP_ENTITLEMENT - A2UI_PROVENANCE_RECORD_TYPE_APP_USER - A2UI_PROVENANCE_RECORD_TYPE_APP_RESOURCE - A2UI_PROVENANCE_RECORD_TYPE_APP_RESOURCE_TYPE - A2UI_PROVENANCE_RECORD_TYPE_TASK - A2UI_PROVENANCE_RECORD_TYPE_POLICY - A2UI_PROVENANCE_RECORD_TYPE_CONNECTOR - A2UI_PROVENANCE_RECORD_TYPE_ACCESS_REVIEW - A2UI_PROVENANCE_RECORD_TYPE_ACCESS_REVIEW_TEMPLATE - A2UI_PROVENANCE_RECORD_TYPE_ACCESS_REVIEW_SELECTION - A2UI_PROVENANCE_RECORD_TYPE_CONFLICT_MONITOR - A2UI_PROVENANCE_RECORD_TYPE_ACCESS_VIOLATION - A2UI_PROVENANCE_RECORD_TYPE_REQUEST_CATALOG - A2UI_PROVENANCE_RECORD_TYPE_WEBHOOK - A2UI_PROVENANCE_RECORD_TYPE_DIRECTORY - A2UI_PROVENANCE_RECORD_TYPE_PROFILE_TYPE - A2UI_PROVENANCE_RECORD_TYPE_ROLE_BINDING - A2UI_PROVENANCE_RECORD_TYPE_AUTOMATION_EXECUTION - A2UI_PROVENANCE_RECORD_TYPE_AUTOMATION_EXECUTION_STEP - A2UI_PROVENANCE_RECORD_TYPE_FINDING - A2UI_PROVENANCE_RECORD_TYPE_METRIC - A2UI_PROVENANCE_RECORD_TYPE_AUTOMATION - A2UI_PROVENANCE_RECORD_TYPE_GRANT_HISTORY - A2UI_PROVENANCE_RECORD_TYPE_GRANT_REASON - A2UI_PROVENANCE_RECORD_TYPE_APP_OWNER type: string x-speakeasy-unknown-values: allow title: A 2 Ui Provenance Object type: object x-speakeasy-name-override: A2UIProvenanceObject securitySchemes: bearerAuth: scheme: bearer type: http oauth: description: >- This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the [c1TokenSource.Token()](https://github.com/ConductorOne/conductorone-sdk-go/blob/3375fe7c0126d17e7ec4e711693dee7b791023aa/token_source.go#L101-L187) function. flows: clientCredentials: scopes: {} tokenUrl: /auth/v1/token type: oauth2 ````