List issue groups

GET

/v1/issues/groups

const url = 'https://api.devsecure.io/v1/issues/groups?limit=50&latest_only=true';
const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url 'https://api.devsecure.io/v1/issues/groups?limit=50&latest_only=true' \
  --header 'Authorization: Bearer <token>'

Issues grouped by scanner and vulnerability (CVE, else CWE, else title), most severe first. List a group’s issues with GET /v1/issues?group_id=.... Filters apply to the issues before grouping; without a status filter only groups with open issues are returned.

Authorizations

ApiKey
issues:read
OAuth2
issues:read

Parameters

Query Parameters

limit

Limit

Page size (1-200).

integer

default: 50 >= 1 <= 200

Page size (1-200).

cursor

Any of:

string
null

string

<= 1024 characters

Opaque cursor from the previous page.

severity

Severity

Array<string>

default:

Allowed values: critical high medium low info

status

Status

Array<string>

default:

Allowed values: open resolved snoozed false_positive accepted_risk

scan_type

Scan Type

Array<string>

default:

Allowed values: code upload dast container pentest cms other

scanner

Scanner

Scanner tool name, e.g. semgrep.

Array<string>

default: <= 10 items

Scanner tool name, e.g. semgrep.

scan_id

Any of:

string
null

string

<= 20 characters

repository_id

Any of:

string
null

string

<= 64 characters

group_id

Any of:

string
null

string

<= 64 characters

cwe

Any of:

integer
null

integer

>= 1 <= 100000

cve

Any of:

string
null

string

<= 50 characters

Any of:

string
null

string

>= 1 characters <= 100 characters

Case-insensitive title contains.

created_after

Any of:

string
null

string format: date-time

Inclusive, ISO 8601.

created_before

Any of:

string
null

string format: date-time

Exclusive, ISO 8601.

latest_only

Latest Only

Only issues from the latest scan of each repository or target, as in the dashboard.

boolean

default: true

Only issues from the latest scan of each repository or target, as in the dashboard.

Responses

200

OK.

application/json

IssueGroupList

object

data

required

Data

Array<object>

IssueGroup

object

required

string

title

required

Title

string

severity

required

Severity

Highest severity among the group’s issues.

string

Allowed values: critical high medium low info

scanner

Any of:

string
null

string

cwe

Any of:

integer
null

integer

cve

Any of:

string
null

string

open_count

required

Open Count

integer

total_count

required

Total Count

integer

repository_count

required

Repository Count

integer

first_seen_at

Any of:

string
null

string

last_seen_at

Any of:

string
null

string

pagination

required

PageInfo

object

next_cursor

required

Any of:

string
null

string

has_more

required

Has More

boolean

Example

{
  "data": [
    {
      "id": "grp_6b1d0c9e8f7a6b5c4d3e2f1a",
      "severity": "critical"
    }
  ]
}

Headers

X-Request-ID

string

Identifies the request; quote it to support.

X-RateLimit-Limit

integer

Requests allowed per window.

X-RateLimit-Remaining

integer

Requests left in the window.

X-RateLimit-Reset

integer

Seconds until the window resets.

X-Has-Next-Page

string

Allowed values: true false

Whether another page follows.

400

The request is not valid (validation_error, invalid_cursor).

application/json

ErrorEnvelope

object

error

required

ErrorBody

object

code

required

Code

string

message

required

Message

string

request_id

required

Any of:

string
null

string

details

Any of:

Array<object>

ErrorDetail

object

field

Any of:

string
null

string

message

required

Message

string

Example

{
  "error": {
    "code": "validation_error",
    "message": "The request is not valid.",
    "request_id": "req_3f0c2a9d5b6e4f7a8c1d2e3f4a5b6c7d"
  }
}

Headers

X-Request-ID

string

Identifies the request; quote it to support.

401

Missing, unknown, expired or revoked credential (invalid_credentials).

application/json

ErrorEnvelope

object

error

required

ErrorBody

object

code

required

Code

string

message

required

Message

string

request_id

required

Any of:

string
null

string

details

Any of:

Array<object>

ErrorDetail

object

field

Any of:

string
null

string

message

required

Message

string

Example

{
  "error": {
    "code": "invalid_credentials",
    "message": "The credential is missing, invalid, expired or revoked.",
    "request_id": "req_3f0c2a9d5b6e4f7a8c1d2e3f4a5b6c7d"
  }
}

Headers

X-Request-ID

string

Identifies the request; quote it to support.

403

The credential may not do this (insufficient_scope, permission_denied, plan_not_allowed, quota_exceeded, target_not_authorized).

application/json

ErrorEnvelope

object

error

required

ErrorBody

object

code

required

Code

string

message

required

Message

string

request_id

required

Any of:

string
null

string

details

Any of:

Array<object>

ErrorDetail

object

field

Any of:

string
null

string

message

required

Message

string

Example

{
  "error": {
    "code": "insufficient_scope",
    "message": "The credential does not have the scope this operation needs.",
    "request_id": "req_3f0c2a9d5b6e4f7a8c1d2e3f4a5b6c7d"
  }
}

Headers

X-Request-ID

string

Identifies the request; quote it to support.

429

Too many requests (rate_limited).

application/json

ErrorEnvelope

object

error

required

ErrorBody

object

code

required

Code

string

message

required

Message

string

request_id

required

Any of:

string
null

string

details

Any of:

Array<object>

ErrorDetail

object

field

Any of:

string
null

string

message

required

Message

string

Example

{
  "error": {
    "code": "rate_limited",
    "message": "Too many requests. Retry after the time in Retry-After.",
    "request_id": "req_3f0c2a9d5b6e4f7a8c1d2e3f4a5b6c7d"
  }
}

Headers

X-Request-ID

string

Identifies the request; quote it to support.

X-RateLimit-Limit

integer

Requests allowed per window.

X-RateLimit-Remaining

integer

Requests left in the window.

X-RateLimit-Reset

integer

Seconds until the window resets.

Retry-After

integer

Seconds to wait before retrying.

500

Unexpected error (internal_error). Quote the request id to support.

application/json

ErrorEnvelope

object

error

required

ErrorBody

object

code

required

Code

string

message

required

Message

string

request_id

required

Any of:

string
null

string

details

Any of:

Array<object>

ErrorDetail

object

field

Any of:

string
null

string

message

required

Message

string

Example

{
  "error": {
    "code": "internal_error",
    "message": "Something went wrong on our side.",
    "request_id": "req_3f0c2a9d5b6e4f7a8c1d2e3f4a5b6c7d"
  }
}

Headers

X-Request-ID

string

Identifies the request; quote it to support.