issue.created

POST

A scan found an issue whose fingerprint was not seen before in the workspace. Subscribing needs the issues:read scope.

Parameters

Header Parameters

X-DevSecure-Signature

required

string

T=,v1=<hex HMAC-SHA256 of “.”>[,v1=…]

X-DevSecure-Event

required

string

The event type.

X-DevSecure-Event-Id

required

string

The event id; the same on every retry and redelivery.

X-DevSecure-Delivery

required

string

The delivery id.

X-DevSecure-Webhook-Id

required

string

The webhook subscription id.

Request Body^required

Media typeapplication/json

object

id

required

Event id.

string format: uuid

type

required

string

Allowed value: issue.created

api_version

required

string

Allowed value: v1

created_at

required

string format: date-time

data

required

object

issue

required

IssueSummary

object

id

required

Id

string format: uuid

title

required

Title

string

severity

required

Severity

string

Allowed values: critical high medium low info

status

required

Status

string

Allowed values: open resolved snoozed false_positive accepted_risk

status_reason

Any of:

string

string

null

null

status_expires_at

Any of:

string

string

null

null

status_changed_at

Any of:

string

string

null

null

scanner

Any of:

string

string

null

null

scanner_confidence

Any of:

string

string

null

null

cwe

Any of:

integer

integer

null

null

cve

Any of:

string

string

null

null

cvss_score

Any of:

number

number

null

null

file_path

Any of:

string

string

null

null

line_number

Any of:

integer

integer

null

null

function_name

Any of:

string

string

null

null

language

Any of:

string

string

null

null

risk_priority_score

Any of:

integer

integer

null

null

remediation_safety_score

Any of:

integer

integer

null

null

fingerprint

Any of:

string

string

null

null

reopened

required

Reopened

True when this issue recurred after being marked a false positive.

boolean

scan_id

required

Scan Id

string

scan_type

required

Scan Type

string

Allowed values: code upload dast container pentest cms other

repository

Any of:

ScanRepository

ScanRepository

object

id

required

Id

string

provider

required

Provider

string

Allowed values: github gitlab bitbucket container

name

required

Name

string

null

null

target

Any of:

string

string

null

null

first_seen_at

Any of:

string

string

null

null

created_at

Any of:

string

string

null

null

updated_at

Any of:

string

string

null

null

Responses

410

Gone: DevSecure turns the webhook off.

2XX

Received. Any 2xx status counts as delivered.

default

Anything else (or no answer in 10 s) is retried.