> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lanesync.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Upload CI evidence

> Requires CI auth (GitHub OIDC JWT or LaneSync API key). Tenant derived from verified token.



## OpenAPI

````yaml /api-reference/openapi.json post /api/evidence/upload
openapi: 3.1.0
info:
  title: LaneSync API
  description: >-
    REST API for LaneSync release governance — milestones, evidence, quality,
    and sync.
  version: 1.0.0
  contact:
    name: LaneSync
    url: https://lanesync.dev
servers:
  - url: https://lanesync.dev
    description: Hosted SaaS
security: []
tags:
  - name: Health
    description: Liveness and readiness
  - name: Auth
    description: GitHub OAuth and sessions
  - name: Dashboard
    description: Org-wide milestone views
  - name: Milestones
    description: Release pipeline and deploy gates
  - name: Repos
    description: Repository bootstrap and configuration
  - name: Sync
    description: GitHub sync triggers
  - name: Evidence
    description: CI evidence upload (no session)
  - name: Quality
    description: Quality scorecards and exports
  - name: Projects
    description: Multi-repo release projects
  - name: Team
    description: Workspace members and invites
  - name: Webhook
    description: GitHub App webhooks
paths:
  /api/evidence/upload:
    post:
      tags:
        - Evidence
      summary: Upload CI evidence
      description: >-
        Requires CI auth (GitHub OIDC JWT or LaneSync API key). Tenant derived
        from verified token.
      operationId: uploadEvidence
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/EvidenceUpload'
      responses:
        '201':
          description: Evidence recorded
          content:
            application/json:
              schema:
                type: object
                properties:
                  evidenceId:
                    type: string
                  message:
                    type: string
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
      security:
        - CiBearerAuth: []
components:
  schemas:
    EvidenceUpload:
      type: object
      required:
        - org
        - repo
        - version
        - pipeline
        - metrics
      properties:
        org:
          type: string
          example: acme
        repo:
          type: string
          example: api
        version:
          type: string
          example: v1.0.0
        pipeline:
          type: string
          example: CI — Build & Test
        metrics:
          type: object
        reports:
          type: object
        environment:
          type: string
          example: staging
    Error:
      type: object
      properties:
        error:
          type: string
  responses:
    BadRequest:
      description: Validation error
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
    Unauthorized:
      description: Missing or invalid session
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
    Forbidden:
      description: Not a workspace member
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
    NotFound:
      description: Resource not found
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
  securitySchemes:
    CiBearerAuth:
      type: http
      scheme: bearer
      description: GitHub Actions OIDC JWT (audience=lanesync) or LaneSync API key (lsk_*)

````