GEgecko

Export vulnerabilities as SARIF

The vulnerabilities matching the list filters as a SARIF 2.1.0 log, one run per repository, ready for GitHub code scanning. Fixed findings are left out, so uploading the log closes their alerts. Rather than truncate, the request fails with export_too_large when the filters match more than 10,000 vulnerabilities.

get/vulnerabilities/sarif

Request

  • Base URL
    https://app.gecko.security/api/v1
  • URL
    https://app.gecko.security/api/v1/vulnerabilities/sarif
  • Auth
    • API key in header X-API-Key
    • or HTTP bearer

Query parameters

severitystring
statusstring
typestring
cwestring

Comma-separated CWE ids; CWE-79, cwe-79 and 79 are equivalent.

created_afterstring date-time
created_beforestring date-time
repositorystring
scan_idstring uuid
pull_requestinteger

Filter to the PR/MR with this number; combine with repository to disambiguate across repos.

Response

A SARIF 2.1.0 log

Changes

No recorded changes to this operation across all 1 revision of this API.