ZEzeropath
Issues

Search

List security issues with filtering by status, severity, detection type, repository, and more. To find a specific issue by id, pass the id (full UUID or the short 8-character form, with or without dashes) as searchQuery; it also matches title, vulnerability class, and affected file substrings. Supports sorting and cursor-based pagination via limit and cursor. Each result can include vulnerabilityPatch summary metadata (validated, pullRequestStatus, prLink, error), patchGenerationRequestView state when patch generation is queued/running/failed/completed, and the latest runtimeValidation verdict summary when dynamic validation has tested the issue. Use issues.get for the full remediation and Runtime Validation payload, including patch diff, PR metadata, Runtime Validation evidence, and runnable Runtime Validation POC code when available. Important: the statuses filter defaults to ["PENDING_REVIEW"] — to see all issues, pass all statuses explicitly.

post/api/v2/issues/search

Request

  • Base URL
    https://zeropath.com
  • Auth
    API key in header X-ZeroPath-API-Token-Id and API key in header X-ZeroPath-API-Token-Secret

Request body

searchQuerystring

Free-text filter matched against issue title, vulnerability class, and affected file path. A query that looks like an issue id — hex digits and dashes only, at least 4 hex digits — also matches the issue id as a prefix, so the full UUID, the short 8-character issue id, and any longer prefix all find the issue. Dashes and surrounding whitespace are ignored for id matching.

scoreLevelsstring[]
severityLevelsstring[]
languagesstring[]
vulnerabilityClassesstring[]
scanIdstring
codeScanTypesstring[]
statusesstring[]
detectionTypesstring[]
showOnlyNewIssuesboolean
hasWizExposureboolean
secretVerifiedboolean

Limit to findings whose detected secret was verified live against its provider. Applies to every category.

lane'fix_now' | 'next' | 'later' | 'reviewing' | 'patching' | 'resolved' | 'non_exploitable' | 'false_positive' | 'accepted_risk' | 'informational'
boardValidation'validated' | 'unvalidated' | 'not_examined'
knownExploitedboolean
kevRansomwareboolean
epssMinnumber
dependencyReachabilitystring[]
hasFixboolean
dependencyQuerystring
validationStatesstring[]
runtimeValidationVerdictsstring[]
reachabilitystring[]
cvssAttackVectorsstring[]

Filter by the canonical CVSS 4.0 attack-vector metric.

cvssAttackComplexitiesstring[]

Filter by the canonical CVSS 4.0 attack-complexity metric.

cvssPrivilegesRequiredstring[]

Filter by the canonical CVSS 4.0 privileges-required metric.

cvssUserInteractionsstring[]

Filter by the canonical CVSS 4.0 user-interaction metric.

runtimeValidationSetupRequirementsstring[]

Filter by the runtime validation setup classification.

createdAfterstring
createdBeforestring
createdInLastNDaysinteger
resolvedAfterstring
resolvedBeforestring
resolvedInLastNDaysinteger
sortBy'priority' | 'createdAt' | 'score' | 'title' | 'repository' | 'class' | 'file' | 'patch'
sortOrder'asc' | 'desc'
issueIdsstring[]
excludeScorenumber
organizationIdstring
presentationboolean
pageinteger
cursorstring
limitinteger
projectIdstring

Response

List of matching issues

totalCountinteger required
hasMoreboolean required
nextCursorstring nullable required

Changes

No recorded changes to this operation across all 1 revision of this API.