REreplicated
customers

Compare CVEs between two channel releases.

Changed on

Returns deduplicated CVEs resolved by the target release and introduced by the target release, grouped by severity. By default only CVEs with a known fix version are compared. Set includeUnfixable=true to compare all CVEs. Both releases must have complete scan data.

Required RBAC Policy: kots/app/[:appid]/channel/[:channelid]/read

get/app/{app_id}/security/cve-diff

Request

  • Base URL
    https://api.replicated.com/vendor/v3
  • URL
    https://api.replicated.com/vendor/v3/app/{app_id}/security/cve-diff
  • Auth
    API key in header Authorization

Path parameters

app_idstring required

App identifier

Query parameters

fromSequenceinteger required

Channel sequence for the source release.

toSequenceinteger required

Channel sequence for the target release.

channelIdstring required

Channel containing both releases.

includeUnfixableboolean

Include CVEs without a known fix. Defaults to false.

Response

GetSecurityCVEDiffResponse contains the requested CVE difference between two channel releases.

Changes