Get SCA Issues for Scan

Retrieve SCA issues for a specific scan

GET /scan/{scan_id}/issues/sca

Get SCA Issues for Scan

cURL

curl --request GET \
  --url https://www.corgea.app/api/v1/scan/{scan_id}/issues/sca \
  --header 'CORGEA-TOKEN: <api-key>'

200

{
  "status": "ok",
  "page": 123,
  "total_pages": 123,
  "total_issues": 123,
  "issues": [
    {
      "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "created_at": "2023-11-07T05:31:56Z",
      "description": "<string>",
      "details": "<string>",
      "severity": "CRITICAL",
      "cvss_score": 123,
      "classification": "<string>",
      "cve": "<string>",
      "package": {
        "name": "<string>",
        "version": "<string>",
        "ecosystem": "<string>",
        "fix_version": "<string>"
      },
      "location": {
        "path": "<string>"
      },
      "reachability": {
        "status": "not_direct_dependency",
        "description": "<string>"
      }
    }
  ]
}

Authorizations

CorgeaTokenBearerAuth

CORGEA-TOKEN · string · header · required

API key for authentication API tokens belonging to inactive users are rejected.

Path Parameters

scan_id · string<uuid> · required

The ID of the scan

Query Parameters

page · integer · default: 1

The page number for pagination

page_size · integer · default: 20

The number of results per page

Required range: x <= 50

severity · string

Filter by severity levels (comma-separated). Valid values: CRITICAL, HIGH, MEDIUM, LOW

package · string

Filter by package name (partial match)

ecosystem · string

Filter by package ecosystem (case-insensitive)

cve · string

Filter by CVE identifier (partial match)

path · string

Filter by file path (partial match)

has_fix · boolean

Filter by whether a fix is available (true/false)

reachability · enum<string>

Filter SCA issues by dependency reachability status

Available options: not_direct_dependency, pending, vulnerable_usage_reachable, vulnerable_usage_unreachable, dead_dependency

include_reachability · boolean · default: false

Include dependency reachability status and description for each SCA issue.

sort_by · enum<string>

Sort results by field (prefix with '-' for descending order)

Available options: created_at, -created_at, severity, -severity, package, -package, ecosystem, -ecosystem

status · string

Filter by triage status (comma-separated). Valid values: open, fixed, false_positive, accepted_risk, duplicate

package_exact · string

Filter by an exact package name. Unlike package, this does not match packages that merely contain the value (lodash will not match lodash.merge), which makes it safe for drilling into a package group.

search · string

Free-text search across package name, CVE identifier, summary, details, path and classification

Response

200

application/json

SCA issues retrieved successfully

status · string

Example:

"ok"

page · integer

total_pages · integer

total_issues · integer

issues · object[]

Show child attributes