Starting an organization or repository scan using the rest api is done exactly the same as starting a branch build, however the response is different and there seems to be no way to determine when the scan has finished and what the result is.