List All Issues

Retrieve a list of all security issues for the authenticated user’s company. By default, results are ordered by creation time, newest first, with issue ID as a tie-breaker for stable pagination.

GET /issues

List All Issues

cURL

curl --request GET \
  --url https://www.corgea.app/api/v1/issues \
  --header 'CORGEA-TOKEN: <api-key>'

200

{
  "status": "ok",
  "page": 123,
  "total_pages": 123,
  "total_issues": 123,
  "issues": [
    {
      "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "classification": {
        "id": "CWE-123",
        "name": "Vulnerability Name",
        "description": "<string>"
      },
      "urgency": "CR",
      "created_at": "2023-11-07T05:31:56Z",
      "first_detection_date": "2023-11-07T05:31:56Z",
      "status": "open",
      "sla_status": "overdue",
      "location": {
        "file": {
          "name": "<string>",
          "language": "<string>",
          "path": "<string>",
          "git_hash": "<string>"
        },
        "project": {
          "name": "<string>",
          "branch": "<string>",
          "git_sha": "<string>"
        },
        "line_number": 123,
        "sink_line_number": 123
      },
      "auto_triage": {
        "false_positive_detection": {
          "status": "valid",
          "reasoning": "<string>"
        }
      },
      "auto_fix_suggestion": {
        "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "status": "fix_available",
        "patch": {
          "diff": "<string>",
          "explanation": "<string>",
          "full_code": "<string>"
        }
      },
      "assigned_to": {
        "id": "<string>",
        "email": "[e-mail]",
        "name": "<string>"
      },
      "reachability": {
        "is_reachable": true,
        "endpoint_count": 123
      }
    }
  ]
}

Authorizations

CorgeaTokenBearerAuth

CORGEA-TOKEN · string · header · required

API key for authentication API tokens belonging to inactive users are rejected.

Query Parameters

project · string

Filter issues by project name

repo · string

Filter issues by repository URL

branch · string

Filter issues by branch name

triggered_by · string

Filter issues to the latest scan triggered by a specific user. Use an email address or "current_user".

scan_type · enum<string>

Filter issues to the latest scan by scan type. Use "full" or "partial".

Available options: full, partial

show_false_positives · boolean · default: false

Include issues marked as false positives (manual or AI). By default false positives are excluded.

include_reachability · boolean · default: false

Include endpoint reachability summary for each issue.

file_path_exact · string

Filter by an exact file path. Unlike file_path, this does not match paths that merely contain the value, which makes it safe for drilling into a file group returned by the groups endpoint.

search · string

Free-text search across classification and file path

urgency · string

Filter by urgency levels (comma-separated). Valid values: CR, HI, ME, LO

status · string

Filter by status (comma-separated). Valid values: fixed, false_positive, accepted_risk, open, fix_in_progress, duplicate

sla_status · string

Filter by SLA status (comma-separated). Valid values: overdue, escalated

confidence · string

Filter by confidence levels (comma-separated). Valid values: HI, ME, LO

language · string

Filter by programming language (case-insensitive)

file_path · string

Filter by file path (partial match)

classification · string

Filter by classification (partial match) or CWE identifier. CWE matching ignores leading zeros and matches the complete identifier: CWE-79 matches CWE-079, but not CWE-798.

cwe · string

Filter by one or more CWE identifiers (comma-separated), using the same matching as classification. Use this to drill into a CWE group returned by the groups endpoint.

sort_by · enum<string>

Sort results by field (prefix with '-' for descending order). Issue ID breaks ties when sorting.

Available options: created_at, -created_at, urgency, -urgency, status, -status, classification, -classification

page · integer · default: 1

The page number for pagination

page_size · integer · default: 20

The number of results per page

Required range: x <= 50

Response

200

application/json

Issues retrieved successfully or no project found

Option 1

Option 2

status · string

Example:

"ok"

page · integer

total_pages · integer

total_issues · integer

issues · object[]

Show child attributes