Microsoft Graph Security — security.labelsRoot

naftiko: 1.0.0-alpha2
info:
  label: Microsoft Graph Security — security.labelsRoot
  description: 'Microsoft Graph Security — security.labelsRoot. 60 operations. Lead operation: Microsoft Graph Get labels
    from security. Self-contained Naftiko capability covering one Microsoft Graph business surface.'
  tags:
  - Microsoft Graph
  - security.labelsRoot
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    MICROSOFT_GRAPH_API_KEY: MICROSOFT_GRAPH_API_KEY
capability:
  consumes:
  - type: http
    namespace: security-security-labelsroot
    baseUri: ''
    description: Microsoft Graph Security — security.labelsRoot business capability. Self-contained, no shared references.
    resources:
    - name: security-labels
      path: /security/labels
      operations:
      - name: securitygetlabels
        method: GET
        description: Microsoft Graph Get labels from security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: securityupdatelabels
        method: PATCH
        description: Microsoft Graph Update the navigation property labels in security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: securitydeletelabels
        method: DELETE
        description: Microsoft Graph Delete navigation property labels for security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: If-Match
          in: header
          type: string
          description: ETag
    - name: security-labels-authorities
      path: /security/labels/authorities
      operations:
      - name: securitylabelslistauthorities
        method: GET
        description: Microsoft Graph List authorityTemplates
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $orderby
          in: query
          type: array
          description: Order items by property values
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: securitylabelscreateauthorities
        method: POST
        description: Microsoft Graph Create authorityTemplate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: security-labels-authorities-$count
      path: /security/labels/authorities/$count
      operations:
      - name: securitylabelsauthoritiesgetcountecc0
        method: GET
        description: Microsoft Graph Get the number of the resource
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: security-labels-authorities-authorityTemplate-id
      path: /security/labels/authorities/{authorityTemplate-id}
      operations:
      - name: securitylabelsgetauthorities
        method: GET
        description: Microsoft Graph Get authorityTemplate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: securitylabelsupdateauthorities
        method: PATCH
        description: Microsoft Graph Update the navigation property authorities in security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: securitylabelsdeleteauthorities
        method: DELETE
        description: Microsoft Graph Delete authorityTemplate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: If-Match
          in: header
          type: string
          description: ETag
    - name: security-labels-categories
      path: /security/labels/categories
      operations:
      - name: securitylabelslistcategories
        method: GET
        description: Microsoft Graph List categoryTemplates
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $orderby
          in: query
          type: array
          description: Order items by property values
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: securitylabelscreatecategories
        method: POST
        description: Microsoft Graph Create categoryTemplate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: security-labels-categories-$count
      path: /security/labels/categories/$count
      operations:
      - name: securitylabelscategoriesgetcount908b
        method: GET
        description: Microsoft Graph Get the number of the resource
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: security-labels-categories-categoryTemplate-id
      path: /security/labels/categories/{categoryTemplate-id}
      operations:
      - name: securitylabelsgetcategories
        method: GET
        description: Microsoft Graph Get categoryTemplate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: securitylabelsupdatecategories
        method: PATCH
        description: Microsoft Graph Update the navigation property categories in security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: securitylabelsdeletecategories
        method: DELETE
        description: Microsoft Graph Delete categoryTemplate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: If-Match
          in: header
          type: string
          description: ETag
    - name: security-labels-categories-categoryTemplate-id-subcategories
      path: /security/labels/categories/{categoryTemplate-id}/subcategories
      operations:
      - name: securitylabelscategorieslistsubcategories
        method: GET
        description: Microsoft Graph List subcategories
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $orderby
          in: query
          type: array
          description: Order items by property values
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: securitylabelscategoriescreatesubcategories
        method: POST
        description: Microsoft Graph Create subcategoryTemplate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: security-labels-categories-categoryTemplate-id-subcategories-$count
      path: /security/labels/categories/{categoryTemplate-id}/subcategories/$count
      operations:
      - name: securitylabelscategoriessubcategoriesgetcountec6d
        method: GET
        description: Microsoft Graph Get the number of the resource
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: security-labels-categories-categoryTemplate-id-subcategories-subcategoryTemplate
      path: /security/labels/categories/{categoryTemplate-id}/subcategories/{subcategoryTemplate-id}
      operations:
      - name: securitylabelscategoriesgetsubcategories
        method: GET
        description: Microsoft Graph Get subcategoryTemplate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: securitylabelscategoriesupdatesubcategories
        method: PATCH
        description: Microsoft Graph Update the navigation property subcategories in security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: securitylabelscategoriesdeletesubcategories
        method: DELETE
        description: Microsoft Graph Delete navigation property subcategories for security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: If-Match
          in: header
          type: string
          description: ETag
    - name: security-labels-citations
      path: /security/labels/citations
      operations:
      - name: securitylabelslistcitations
        method: GET
        description: Microsoft Graph List citationTemplates
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $orderby
          in: query
          type: array
          description: Order items by property values
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: securitylabelscreatecitations
        method: POST
        description: Microsoft Graph Create citationTemplate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: security-labels-citations-$count
      path: /security/labels/citations/$count
      operations:
      - name: securitylabelscitationsgetcount15c2
        method: GET
        description: Microsoft Graph Get the number of the resource
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: security-labels-citations-citationTemplate-id
      path: /security/labels/citations/{citationTemplate-id}
      operations:
      - name: securitylabelsgetcitations
        method: GET
        description: Microsoft Graph Get citationTemplate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: securitylabelsupdatecitations
        method: PATCH
        description: Microsoft Graph Update the navigation property citations in security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: securitylabelsdeletecitations
        method: DELETE
        description: Microsoft Graph Delete citationTemplate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: If-Match
          in: header
          type: string
          description: ETag
    - name: security-labels-departments
      path: /security/labels/departments
      operations:
      - name: securitylabelslistdepartments
        method: GET
        description: Microsoft Graph List departmentTemplates
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $orderby
          in: query
          type: array
          description: Order items by property values
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: securitylabelscreatedepartments
        method: POST
        description: Microsoft Graph Create departmentTemplate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: security-labels-departments-$count
      path: /security/labels/departments/$count
      operations:
      - name: securitylabelsdepartmentsgetcountb983
        method: GET
        description: Microsoft Graph Get the number of the resource
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: security-labels-departments-departmentTemplate-id
      path: /security/labels/departments/{departmentTemplate-id}
      operations:
      - name: securitylabelsgetdepartments
        method: GET
        description: Microsoft Graph Get departmentTemplate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: securitylabelsupdatedepartments
        method: PATCH
        description: Microsoft Graph Update the navigation property departments in security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: securitylabelsdeletedepartments
        method: DELETE
        description: Microsoft Graph Delete departmentTemplate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: If-Match
          in: header
          type: string
          description: ETag
    - name: security-labels-filePlanReferences
      path: /security/labels/filePlanReferences
      operations:
      - name: securitylabelslistfileplanreferences
        method: GET
        description: Microsoft Graph List filePlanReferenceTemplates
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $orderby
          in: query
          type: array
          description: Order items by property values
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: securitylabelscreatefileplanreferences
        method: POST
        description: Microsoft Graph Create filePlanReferenceTemplate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: security-labels-filePlanReferences-$count
      path: /security/labels/filePlanReferences/$count
      operations:
      - name: securitylabelsfileplanreferencesgetcount3c22
        method: GET
        description: Microsoft Graph Get the number of the resource
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: security-labels-filePlanReferences-filePlanReferenceTemplate-id
      path: /security/labels/filePlanReferences/{filePlanReferenceTemplate-id}
      operations:
      - name: securitylabelsgetfileplanreferences
        method: GET
        description: Microsoft Graph Get filePlanReferenceTemplate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: securitylabelsupdatefileplanreferences
        method: PATCH
        description: Microsoft Graph Update the navigation property filePlanReferences in security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: securitylabelsdeletefileplanreferences
        method: DELETE
        description: Microsoft Graph Delete filePlanReferenceTemplate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: If-Match
          in: header
          type: string
          description: ETag
    - name: security-labels-retentionLabels
      path: /security/labels/retentionLabels
      operations:
      - name: securitylabelslistretentionlabels
        method: GET
        description: Microsoft Graph List retentionLabels
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $orderby
          in: query
          type: array
          description: Order items by property values
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: securitylabelscreateretentionlabels
        method: POST
        description: Microsoft Graph Create retentionLabel
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: security-labels-retentionLabels-$count
      path: /security/labels/retentionLabels/$count
      operations:
      - name: securitylabelsretentionlabelsgetcount3249
        method: GET
        description: Microsoft Graph Get the number of the resource
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: security-labels-retentionLabels-retentionLabel-id
      path: /security/labels/retentionLabels/{retentionLabel-id}
      operations:
      - name: securitylabelsgetretentionlabels
        method: GET
        description: Microsoft Graph Get retentionLabels from security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: securitylabelsupdateretentionlabels
        method: PATCH
        description: Microsoft Graph Update retentionLabel
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: securitylabelsdeleteretentionlabels
        method: DELETE
        description: Microsoft Graph Delete retentionLabel
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: If-Match
          in: header
          type: string
          description: ETag
    - name: security-labels-retentionLabels-retentionLabel-id-descriptors
      path: /security/labels/retentionLabels/{retentionLabel-id}/descriptors
      operations:
      - name: securitylabelsretentionlabelsgetdescriptors
        method: GET
        description: Microsoft Graph Get descriptors from security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: securitylabelsretentionlabelsupdatedescriptors
        method: PATCH
        description: Microsoft Graph Update the navigation property descriptors in security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: securitylabelsretentionlabelsdeletedescriptors
        method: DELETE
        description: Microsoft Graph Delete navigation property descriptors for security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: If-Match
          in: header
          type: string
          description: ETag
    - name: security-labels-retentionLabels-retentionLabel-id-descriptors-authorityTemplate
      path: /security/labels/retentionLabels/{retentionLabel-id}/descriptors/authorityTemplate
      operations:
      - name: securitylabelsretentionlabelsdescriptorsgetauthoritytemplate
        method: GET
        description: Microsoft Graph Get authorityTemplate from security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
    - name: security-labels-retentionLabels-retentionLabel-id-descriptors-categoryTemplate
      path: /security/labels/retentionLabels/{retentionLabel-id}/descriptors/categoryTemplate
      operations:
      - name: securitylabelsretentionlabelsdescriptorsgetcategorytemplate
        method: GET
        description: Microsoft Graph Get categoryTemplate from security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
    - name: security-labels-retentionLabels-retentionLabel-id-descriptors-citationTemplate
      path: /security/labels/retentionLabels/{retentionLabel-id}/descriptors/citationTemplate
      operations:
      - name: securitylabelsretentionlabelsdescriptorsgetcitationtemplate
        method: GET
        description: Microsoft Graph Get citationTemplate from security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
    - name: security-labels-retentionLabels-retentionLabel-id-descriptors-departmentTemplate
      path: /security/labels/retentionLabels/{retentionLabel-id}/descriptors/departmentTemplate
      operations:
      - name: securitylabelsretentionlabelsdescriptorsgetdepartmenttemplate
        method: GET
        description: Microsoft Graph Get departmentTemplate from security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
    - name: security-labels-retentionLabels-retentionLabel-id-descriptors-filePlanReferenceT
      path: /security/labels/retentionLabels/{retentionLabel-id}/descriptors/filePlanReferenceTemplate
      operations:
      - name: securitylabelsretentionlabelsdescriptorsgetfileplanreferencetemplate
        method: GET
        description: Microsoft Graph Get filePlanReferenceTemplate from security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
    - name: security-labels-retentionLabels-retentionLabel-id-dispositionReviewStages
      path: /security/labels/retentionLabels/{retentionLabel-id}/dispositionReviewStages
      operations:
      - name: securitylabelsretentionlabelslistdispositionreviewstages
        method: GET
        description: Microsoft Graph Get dispositionReviewStages from security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $orderby
          in: query
          type: array
          description: Order items by property values
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: securitylabelsretentionlabelscreatedispositionreviewstages
        method: POST
        description: Microsoft Graph Create new navigation property to dispositionReviewStages for security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: security-labels-retentionLabels-retentionLabel-id-dispositionReviewStages-$count
      path: /security/labels/retentionLabels/{retentionLabel-id}/dispositionReviewStages/$count
      operations:
      - name: securitylabelsretentionlabelsdispositionreviewstagesgetcount48b2
        method: GET
        description: Microsoft Graph Get the number of the resource
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: security-labels-retentionLabels-retentionLabel-id-dispositionReviewStages-dispos
      path: /security/labels/retentionLabels/{retentionLabel-id}/dispositionReviewStages/{dispositionReviewStage-stageNumber}
      operations:
      - name: securitylabelsretentionlabelsgetdispositionreviewstages
        method: GET
        description: Microsoft Graph Get dispositionReviewStages from security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $select
          in: query
          type: array
          description: Select properties to be returned
        - name: $expand
          in: query
          type: array
          description: Expand related entities
      - name: securitylabelsretentionlabelsupdatedispositionreviewstages
        method: PATCH
        description: Microsoft Graph Update the navigation property dispositionReviewStages in security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: securitylabelsretentionlabelsdeletedispositionreviewstages
        method: DELETE
        description: Microsoft Graph Delete navigation property dispositionReviewStages for security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: If-Match
          in: header
          type: string
          description: ETag
    - name: security-labels-retentionLabels-retentionLabel-id-retentionEventType
      path: /security/labels/retentionLabels/{retentionLabel-id}/retentionEventType
      operations:
      - name: securitylabelsretentionlabelsgetretentioneventtype
        method: GET
        description: Microsoft Graph Get retentionEventType from security
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: $select
          in: qu

# --- truncated at 32 KB (85 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/microsoft-graph/refs/heads/main/capabilities/security-security-labelsroot.yaml