ZEzeropath
SCA

Count SCA vulnerabilities

Return the exact number of SCA package vulnerabilities matching a filter set. This is a separate call from /vulnerabilities/search because counting visits every matching row and is substantially slower than fetching one page; request it only when you need the total.

post/api/v1/sca/vulnerabilities/count

Request

  • Base URL
    https://zeropath.com
  • Auth
    API key in header X-ZeroPath-API-Token-Id and API key in header X-ZeroPath-API-Token-Secret

Request body

organizationIdstring required
repositoryIdsstring[]
branchstring

Read each repository as of its newest finished scan on this branch. Omit for the newest scan on any branch.

searchQuerystring
ecosystemsstring[]
advisoryQuerystring

Filter by advisory identifier or alias (CVE, GHSA, etc.)

dependencyNamesstring[]

Filter by dependency/package names (contains match)

transitivity'direct' | 'transitive'

Filter by direct vs transitive dependencies. When omitted, counts both direct and transitive.

reachabilitystring[]

Filter by exploitability status. When omitted, defaults to all four: reachable, needs_review, unreachable, and not_tested.

hasWizExposuretrue

Filter to vulnerabilities associated with applications exposed by Wiz

scanIdstring

Count only findings from this SCA scan, instead of the latest scan per repository. The scan must belong to a repository you can view.

status'all' | 'open' | 'closed'

Patch PR acceptance filter: 'open' means no accepted patch PR, 'closed' means an accepted patch PR, and 'all' includes both. Defaults to 'all'. This is independent of current issue workflow. Pass 'open' to reproduce funnel.open from posture.

severitiesstring[]

Filter by severity bucket.

packageReachabilitystring[]

Filter by the package-level reachability verdict.

isCompiledboolean

Filter to compiled assets (true) or manifest-declared dependencies (false). Omit to count both.

hasFixboolean

Filter to findings with a non-empty recommended fix version — the same population the "fixable" posture numerator counts.

includeEphemeralboolean

Include ephemeral repositories. Defaults to false.

Response

Successful response

totalCountinteger required

Number of findings matching the filters.

Changes

No recorded changes to this operation across all 1 revision of this API.