Get Issues for Scan

curl --request GET \
  --url https://www.corgea.app/api/v1/scan/{scan_id}/issues \
  --header 'CORGEA-TOKEN: <api-key>'

const options = {method: 'GET', headers: {'CORGEA-TOKEN': '<api-key>'}};

fetch('https://www.corgea.app/api/v1/scan/{scan_id}/issues', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://www.corgea.app/api/v1/scan/{scan_id}/issues",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "CORGEA-TOKEN: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://www.corgea.app/api/v1/scan/{scan_id}/issues"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("CORGEA-TOKEN", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://www.corgea.app/api/v1/scan/{scan_id}/issues")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["CORGEA-TOKEN"] = '<api-key>'

response = http.request(request)
puts response.read_body

{
  "status": "ok",
  "page": 123,
  "total_pages": 123,
  "total_issues": 123,
  "issues": [
    {
      "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "classification": {
        "id": "CWE-123",
        "name": "Vulnerability Name",
        "description": "<string>"
      },
      "urgency": "CR",
      "created_at": "2023-11-07T05:31:56Z",
      "first_detection_date": "2023-11-07T05:31:56Z",
      "status": "open",
      "sla_status": "overdue",
      "location": {
        "file": {
          "name": "<string>",
          "language": "<string>",
          "path": "<string>",
          "git_hash": "<string>"
        },
        "project": {
          "name": "<string>",
          "branch": "<string>",
          "git_sha": "<string>"
        },
        "line_number": 123,
        "sink_line_number": 123
      },
      "auto_triage": {
        "false_positive_detection": {
          "status": "valid",
          "reasoning": "<string>"
        }
      },
      "auto_fix_suggestion": {
        "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "status": "fix_available",
        "patch": {
          "diff": "<string>",
          "explanation": "<string>",
          "full_code": "<string>"
        }
      },
      "assigned_to": {
        "id": "<string>",
        "email": "jsmith@example.com",
        "name": "<string>"
      },
      "reachability": {
        "is_reachable": true,
        "endpoint_count": 123
      }
    }
  ]
}

{
  "error": "Permission denied"
}

{
  "status": "error",
  "message": "Scan not found"
}

GET

scan

{scan_id}

issues

Get Issues for Scan

curl --request GET \
  --url https://www.corgea.app/api/v1/scan/{scan_id}/issues \
  --header 'CORGEA-TOKEN: <api-key>'

const options = {method: 'GET', headers: {'CORGEA-TOKEN': '<api-key>'}};

fetch('https://www.corgea.app/api/v1/scan/{scan_id}/issues', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://www.corgea.app/api/v1/scan/{scan_id}/issues",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "CORGEA-TOKEN: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://www.corgea.app/api/v1/scan/{scan_id}/issues"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("CORGEA-TOKEN", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://www.corgea.app/api/v1/scan/{scan_id}/issues")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["CORGEA-TOKEN"] = '<api-key>'

response = http.request(request)
puts response.read_body

{
  "status": "ok",
  "page": 123,
  "total_pages": 123,
  "total_issues": 123,
  "issues": [
    {
      "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "classification": {
        "id": "CWE-123",
        "name": "Vulnerability Name",
        "description": "<string>"
      },
      "urgency": "CR",
      "created_at": "2023-11-07T05:31:56Z",
      "first_detection_date": "2023-11-07T05:31:56Z",
      "status": "open",
      "sla_status": "overdue",
      "location": {
        "file": {
          "name": "<string>",
          "language": "<string>",
          "path": "<string>",
          "git_hash": "<string>"
        },
        "project": {
          "name": "<string>",
          "branch": "<string>",
          "git_sha": "<string>"
        },
        "line_number": 123,
        "sink_line_number": 123
      },
      "auto_triage": {
        "false_positive_detection": {
          "status": "valid",
          "reasoning": "<string>"
        }
      },
      "auto_fix_suggestion": {
        "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "status": "fix_available",
        "patch": {
          "diff": "<string>",
          "explanation": "<string>",
          "full_code": "<string>"
        }
      },
      "assigned_to": {
        "id": "<string>",
        "email": "jsmith@example.com",
        "name": "<string>"
      },
      "reachability": {
        "is_reachable": true,
        "endpoint_count": 123
      }
    }
  ]
}

{
  "error": "Permission denied"
}

{
  "status": "error",
  "message": "Scan not found"
}

Authorizations

CORGEA-TOKEN

string

header

required

API key for authentication API tokens belonging to inactive users are rejected.

Path Parameters

scan_id

string<uuid>

required

The ID of the scan

Query Parameters

page

integer

default:1

The page number for pagination

page_size

integer

default:20

The number of results per page

Required range: x <= 50

urgency

string

Filter by urgency levels (comma-separated). Valid values: CR, HI, ME, LO

status

string

Filter by status (comma-separated). Valid values: fixed, false_positive, accepted_risk, open, fix_in_progress, duplicate

show_false_positives

boolean

default:false

Include issues marked as false positives (manual or AI). By default false positives are excluded.

include_reachability

boolean

default:false

Include endpoint reachability summary for each issue.

language

string

Filter by programming language (case-insensitive)

file_path

string

Filter by file path (partial match)

classification

string

Filter by classification (partial match) or CWE identifier. CWE matching ignores leading zeros and matches the complete identifier: CWE-79 matches CWE-079, but not CWE-798.

file_path_exact

string

Filter by an exact file path. Unlike file_path, this does not match paths that merely contain the value, which makes it safe for drilling into a file group returned by the groups endpoint.

string

Free-text search across classification and file path

cwe

string

Filter by one or more CWE identifiers (comma-separated), using the same matching as classification. Use this to drill into a CWE group returned by the groups endpoint.

confidence

string

Filter by confidence levels (comma-separated). Valid values: HI, ME, LO

sla_status

string

Filter by SLA status (comma-separated). Valid values: overdue, escalated

sort_by

enum<string>

Sort results by field (prefix with '-' for descending order). Issue ID breaks ties when sorting.

Available options:

created_at,

-created_at,

urgency,

-urgency,

status,

-status,

classification,

-classification

Response

Issues retrieved successfully

status

string

Example:

"ok"

page

integer

total_pages

integer

total_issues

integer

issues

object[]

Show child attributes

API Reference

Authentication

Scans

Issues

Triage

Dependencies

Starting Corgea Scan

Uploading 3rd Party Scan

Skills

Projects

Policies

Notifications

Teams

Harness integrations

Users

Get Issues for Scan

Authorizations

Path Parameters

Query Parameters

Response