ZEzeropath
SCA

List SCA vulnerabilities

List dependency vulnerabilities (SCA findings) detected by ZeroPath across your repositories. Each result represents a known CVE or advisory affecting a dependency in your codebase. Results include the affected package name and version, CVE identifiers, severity, reachability status (whether the vulnerable code path is actually called), and patch summary metadata when a remediation exists or is being generated. Use scoreLevels to filter by severity and statuses to control which workflow states are included (defaults to only PENDING_REVIEW). For full vulnerability details including reachability analysis, dependency paths, and patch remediation data such as the proposed diff, call issues.get with the returned issue ID.

post/api/v2/sca/list

Request

  • Base URL
    https://zeropath.com
  • Auth
    API key in header X-ZeroPath-API-Token-Id and API key in header X-ZeroPath-API-Token-Secret

Request body

organizationIdstring

Organization to list SCA vulnerabilities for.

repositoryIdstring

Restrict results to a single repository. If omitted, returns SCA vulnerabilities across all repositories the caller can access.

scanIdstring

Restrict results to vulnerabilities found in a specific scan. If omitted, returns the latest results.

scoreLevelsstring[]

Filter by severity level. Only vulnerabilities matching one of the specified levels are returned. Omit to include all severity levels.

statusesstring[]

Filter by issue workflow status. Defaults to ["PENDING_REVIEW"] if omitted -- pass all statuses explicitly to see everything.

searchQuerystring

Free-text search query to filter results. Matches against vulnerability title, CVE ID, package name, and description.

cursorstring

Opaque pagination cursor returned as nextCursor from a previous response. Pass this to fetch the next page.

limitinteger

Maximum number of vulnerabilities to return per page. Defaults to 25.

Response

Paginated list of SCA vulnerabilities

totalCountinteger required
hasMoreboolean required
nextCursorstring nullable required

Changes

No recorded changes to this operation across all 1 revision of this API.