GraphQL API
L'API espone l'intera piattaforma tramite un unico endpoint GraphQL. Invia un bearer token in Authorization e l'ID del workspace in X-Tenant.
https://vulnara-gw.rso.dev/graphqlcurl https://vulnara-gw.rso.dev/graphql \
-H "Authorization: Bearer $VULNARA_TOKEN" \
-H "X-Tenant: $VULNARA_TENANT" \
-H "Content-Type: application/json" \
-d '{"query":"{ myUser { id } }"}'acceptInvitationMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Boolean!
mutation AcceptInvitation($id: ID!) {
acceptInvitation(id: $id)
}acceptRiskMutation
Accept the residual risk. Checked against riskSettings: the caller's role must meet the level's acceptRole. A refusal is RISK_ACCEPTANCE_REFUSED with extensions.reason one of TREATMENT_NOT_ACCEPT, NO_OWNER, NOT_ASSESSED, ROLE_TOO_LOW, EXPIRY_TOO_LATE, EXPIRY_IN_PAST, SAME_PERSON.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| input | AcceptRiskInput! |
Restituisce Risk!
mutation AcceptRisk($id: ID!, $input: AcceptRiskInput!) {
acceptRisk(id: $id, input: $input) {
id
reference
title
scenario
category
status
owner
treatment
}
}acceptTermsMutation
Accept a version of the Platform Terms for yourself. Every member of the tenant accepts individually. The caller's uid and email are recorded; a caller missing either gets CONSENT_ACTOR_UNKNOWN. A version that is no longer current gets TERMS_VERSION_STALE.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| version | String! |
Restituisce TermsAcceptanceStatus!
mutation AcceptTerms($version: String!) {
acceptTerms(version: $version) {
currentVersion
currentUrl
acceptedVersion
acceptedBy
acceptedAt
isCurrent
}
}Disponibile anche come: Comando CLI vulnara accept_terms
addRiskActionMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| input | RiskActionInput! |
Restituisce RiskAction!
mutation AddRiskAction($id: ID!, $input: RiskActionInput!) {
addRiskAction(id: $id, input: $input) {
id
description
owner
dueAt
status
issueUrl
completedAt
createdAt
}
}Disponibile anche come: Tool MCP add_risk_action
addWebTargetSignInMethodMutation
Add one sign-in method to a web target, keeping the others; a method in the same slot (same kind, and same name for HEADER and COOKIE) is replaced. At most 10, and Basic, Bearer and an Authorization header all set Authorization, so only one of them: otherwise WEB_TARGET_CREDENTIALS_CONFLICT with extensions.reason BASIC_AND_BEARER, AUTHORIZATION_HEADER_TAKEN or TOO_MANY.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | AddWebTargetSignInMethodInput! |
Restituisce WebTarget!
mutation AddWebTargetSignInMethod($input: AddWebTargetSignInMethodInput!) {
addWebTargetSignInMethod(input: $input) {
id
name
baseUrl
scheme
host
port
scopePaths
excludedPaths
}
}assessRiskMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| input | AssessRiskInput! |
Restituisce RiskAssessment!
mutation AssessRisk($id: ID!, $input: AssessRiskInput!) {
assessRisk(id: $id, input: $input) {
id
kind
likelihood
impact
score
level
rationale
assessedBy
}
}Disponibile anche come: Tool MCP assess_risk
assetContextQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| targetType | RiskLinkTarget | |
| targetIds | [ID!] |
Restituisce [AssetContext!]!
query AssetContext($targetType: RiskLinkTarget, $targetIds: [ID!]) {
assetContext(targetType: $targetType, targetIds: $targetIds) {
targetType
targetId
businessCriticality
environment
dataClassification
owner
updatedBy
updatedAt
}
}Disponibile anche come: Tool MCP asset_context
associateGitTokenWithGitEntityMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | GitTokenAssociationInput! |
Restituisce GitToken!
mutation AssociateGitTokenWithGitEntity($input: GitTokenAssociationInput!) {
associateGitTokenWithGitEntity(input: $input) {
id
name
value
expiresAt
flags
status
scopes
createdAt
}
}Disponibile anche come: Comando CLI vulnara associate_git_token_with_git_entity
cancelTaskMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Boolean!
mutation CancelTask($id: ID!) {
cancelTask(id: $id)
}Disponibile anche come: Comando CLI vulnara cancel_task · Tool MCP cancel_task
checkGitTokenQuery
Probe the token against its provider, returning validity, the provider's error (when rejected) and the reported expiry. Used by the add-token form to surface why a token was rejected. When a workspace name is supplied and the token is valid, also returns how many repositories the token can see for it (public + private).
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| value | String! | |
| gitType | GitType! | |
| name | String |
Restituisce GitTokenCheck!
query CheckGitToken($value: String!, $gitType: GitType!, $name: String) {
checkGitToken(value: $value, gitType: $gitType, name: $name) {
valid
statusCode
error
expiresAt
publicRepositoryCount
privateRepositoryCount
scopes
}
}clearDastFindingTriageMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| webTargetId | ID! | |
| matchKey | String! |
Restituisce Boolean!
mutation ClearDastFindingTriage($webTargetId: ID!, $matchKey: String!) {
clearDastFindingTriage(webTargetId: $webTargetId, matchKey: $matchKey)
}clearFindingTriageMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| repositoryId | ID! | |
| matchKey | String! |
Restituisce Boolean!
mutation ClearFindingTriage($repositoryId: ID!, $matchKey: String!) {
clearFindingTriage(repositoryId: $repositoryId, matchKey: $matchKey)
}Disponibile anche come: Tool MCP clear_finding_triage
clearWebTargetCredentialsMutation
Remove a web target's sign-in credentials; later scans run signed out.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | ClearWebTargetCredentialsInput! |
Restituisce WebTarget!
mutation ClearWebTargetCredentials($input: ClearWebTargetCredentialsInput!) {
clearWebTargetCredentials(input: $input) {
id
name
baseUrl
scheme
host
port
scopePaths
excludedPaths
}
}commitScansQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce CommitScanListResult!
query CommitScans($list: List) {
commitScans(list: $list) {
total
items {
id
scanResultId
commitHash
createdAt
updatedAt
}
}
}Disponibile anche come: Tool MCP commit_scans
confirmEmptyOrderMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Boolean!
mutation ConfirmEmptyOrder($id: ID!) {
confirmEmptyOrder(id: $id)
}createEmptyOrderMutation
Restituisce RevolutOrder!
mutation CreateEmptyOrder {
createEmptyOrder {
id
}
}createGitEntityMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | CreateGitEntityInput! |
Restituisce GitEntity!
mutation CreateGitEntity($input: CreateGitEntityInput!) {
createGitEntity(input: $input) {
__typename
... on Organization {
id
name
gitType
externalId
webUrl
htmlUrl
avatarUrl
color
}
... on GitUser {
id
name
gitType
externalId
webUrl
htmlUrl
avatarUrl
color
}
}
}Disponibile anche come: Comando CLI vulnara create_git_entity
createGitTokenMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | CreateGitTokenInput! |
Restituisce GitToken!
mutation CreateGitToken($input: CreateGitTokenInput!) {
createGitToken(input: $input) {
id
name
value
expiresAt
flags
status
scopes
createdAt
}
}Disponibile anche come: Comando CLI vulnara create_git_token
createInvoiceDownloadUrlMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| invoiceId | ID! |
Restituisce InvoiceDownload!
mutation CreateInvoiceDownloadUrl($invoiceId: ID!) {
createInvoiceDownloadUrl(invoiceId: $invoiceId) {
url
filename
tenant
contentType
}
}createNetworkMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | CreateNetworkInput! |
Restituisce Network!
mutation CreateNetwork($input: CreateNetworkInput!) {
createNetwork(input: $input) {
id
name
network
networkType
tenant
securityScore
createdAt
updatedAt
}
}Disponibile anche come: Comando CLI vulnara create_network
createNotificationScopeMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | CreateNotificationScopeInput! |
Restituisce NotificationScope!
mutation CreateNotificationScope($input: CreateNotificationScopeInput!) {
createNotificationScope(input: $input) {
id
channelIds
channelType
scopes
isActive
status
headers {
name
value
}
template
}
}Disponibile anche come: Comando CLI vulnara create_notification_scope
createRepositoryMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | CreateRepositoryInput! |
Restituisce Repository!
mutation CreateRepository($input: CreateRepositoryInput!) {
createRepository(input: $input) {
id
gitEntityId
repositoryName
private
securityScore
programmingLanguage
repositorySize
numberOfBranches
}
}Disponibile anche come: Comando CLI vulnara create_repository
createRiskMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | CreateRiskInput! |
Restituisce Risk!
mutation CreateRisk($input: CreateRiskInput!) {
createRisk(input: $input) {
id
reference
title
scenario
category
status
owner
treatment
}
}Disponibile anche come: Tool MCP create_risk
createScanScheduleMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | CreateScanScheduleInput! |
Restituisce ScanSchedule!
mutation CreateScanSchedule($input: CreateScanScheduleInput!) {
createScanSchedule(input: $input) {
id
action
repositoryId
gitEntityId
webTargetId
networkId
branch
category
}
}Disponibile anche come: Comando CLI vulnara create_scan_schedule
createServiceAccountMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | CreateServiceAccountInput! |
Restituisce CreateServiceAccountPayload!
mutation CreateServiceAccount($input: CreateServiceAccountInput!) {
createServiceAccount(input: $input) {
serviceAccount {
id
name
isActive
expiresAt
}
}
}Disponibile anche come: Comando CLI vulnara create_service_account
createTenantMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | CreateTenantInput! |
Restituisce Tenant!
mutation CreateTenant($input: CreateTenantInput!) {
createTenant(input: $input) {
id
isPaying
members {
id
roles
aiAccess
}
}
}Disponibile anche come: Comando CLI vulnara create_tenant
createWebTargetMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | CreateWebTargetInput! |
Restituisce WebTarget!
mutation CreateWebTarget($input: CreateWebTargetInput!) {
createWebTarget(input: $input) {
id
name
baseUrl
scheme
host
port
scopePaths
excludedPaths
}
}Disponibile anche come: Comando CLI vulnara create_web_target
dashboardAnalyticsQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| days | Int |
Restituisce DashboardAnalytics!
query DashboardAnalytics($days: Int) {
dashboardAnalytics(days: $days) {
days
generatedAt
lastScanAt
averageSecurityScore
previousAverageSecurityScore
severityCounts {
severity
count
}
previousSeverityCounts {
severity
count
}
exposure {
total
previousTotal
newFindings
resolvedFindings
codeFindings
dependencyFindings
corroboratedFindings
falsePositives
}
}
}Disponibile anche come: Tool MCP dashboard_analytics
dastFindingQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce DastFinding!
query DastFinding($id: ID!) {
dastFinding(id: $id) {
id
scanResultId
templateId
name
severity
category
matchedAt
host
}
}Disponibile anche come: Comando CLI vulnara dast_finding · Tool MCP dast_finding
dastFindingsQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce DastFindingListResult!
query DastFindings($list: List) {
dastFindings(list: $list) {
total
items {
id
scanResultId
templateId
name
severity
category
matchedAt
host
}
}
}Disponibile anche come: Comando CLI vulnara dast_findings · Tool MCP dast_findings
dastFindingTriageQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| webTargetId | ID! |
Restituisce [DastFindingTriage!]!
query DastFindingTriage($webTargetId: ID!) {
dastFindingTriage(webTargetId: $webTargetId) {
id
webTargetId
matchKey
state
justification
response
priority
reason
}
}Disponibile anche come: Comando CLI vulnara dast_finding_triage · Tool MCP dast_finding_triage
dastFindingTriageHistoryQuery
Every decision ever taken on this web target's findings, newest first.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| webTargetId | ID! | |
| matchKey | String |
Restituisce [DastFindingTriageEvent!]!
query DastFindingTriageHistory($webTargetId: ID!, $matchKey: String) {
dastFindingTriageHistory(webTargetId: $webTargetId, matchKey: $matchKey) {
id
webTargetId
matchKey
action
state
justification
response
priority
}
}Disponibile anche come: Comando CLI vulnara dast_finding_triage_history · Tool MCP dast_finding_triage_history
declineInvitationMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Boolean!
mutation DeclineInvitation($id: ID!) {
declineInvitation(id: $id)
}deleteGitEntityMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Boolean!
mutation DeleteGitEntity($id: ID!) {
deleteGitEntity(id: $id)
}Disponibile anche come: Comando CLI vulnara delete_git_entity
deleteGitTokenMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Boolean!
mutation DeleteGitToken($id: ID!) {
deleteGitToken(id: $id)
}Disponibile anche come: Comando CLI vulnara delete_git_token
deleteInvitationMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Boolean!
mutation DeleteInvitation($id: ID!) {
deleteInvitation(id: $id)
}deleteNetworkMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Boolean!
mutation DeleteNetwork($id: ID!) {
deleteNetwork(id: $id)
}Disponibile anche come: Comando CLI vulnara delete_network
deleteNetworkScanResultMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Boolean!
mutation DeleteNetworkScanResult($id: ID!) {
deleteNetworkScanResult(id: $id)
}Disponibile anche come: Comando CLI vulnara delete_network_scan_result
deleteNotificationScopeMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Boolean!
mutation DeleteNotificationScope($id: ID!) {
deleteNotificationScope(id: $id)
}Disponibile anche come: Comando CLI vulnara delete_notification_scope
deletePaymentMethodMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Boolean!
mutation DeletePaymentMethod($id: ID!) {
deletePaymentMethod(id: $id)
}deleteRepositoryMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Boolean!
mutation DeleteRepository($id: ID!) {
deleteRepository(id: $id)
}Disponibile anche come: Comando CLI vulnara delete_repository
deleteRiskMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Boolean!
mutation DeleteRisk($id: ID!) {
deleteRisk(id: $id)
}deleteRiskActionMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| actionId | ID! |
Restituisce Boolean!
mutation DeleteRiskAction($id: ID!, $actionId: ID!) {
deleteRiskAction(id: $id, actionId: $actionId)
}deleteScanResultMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Boolean!
mutation DeleteScanResult($id: ID!) {
deleteScanResult(id: $id)
}Disponibile anche come: Comando CLI vulnara delete_scan_result
deleteScanScheduleMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Boolean!
mutation DeleteScanSchedule($id: ID!) {
deleteScanSchedule(id: $id)
}Disponibile anche come: Comando CLI vulnara delete_scan_schedule
deleteServiceAccountMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Boolean!
mutation DeleteServiceAccount($id: ID!) {
deleteServiceAccount(id: $id)
}Disponibile anche come: Comando CLI vulnara delete_service_account
deleteTenantMemberMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Boolean!
mutation DeleteTenantMember($id: ID!) {
deleteTenantMember(id: $id)
}deleteWebTargetMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Boolean!
mutation DeleteWebTarget($id: ID!) {
deleteWebTarget(id: $id)
}Disponibile anche come: Comando CLI vulnara delete_web_target
deprovisionNetworkAgentMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | DeprovisionNetworkAgentInput! |
Restituisce Boolean!
mutation DeprovisionNetworkAgent($input: DeprovisionNetworkAgentInput!) {
deprovisionNetworkAgent(input: $input)
}dismissTaskMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Boolean!
mutation DismissTask($id: ID!) {
dismissTask(id: $id)
}Disponibile anche come: Comando CLI vulnara dismiss_task · Tool MCP dismiss_task
dissociateGitTokenWithGitEntityMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | GitTokenAssociationInput! |
Restituisce Boolean!
mutation DissociateGitTokenWithGitEntity($input: GitTokenAssociationInput!) {
dissociateGitTokenWithGitEntity(input: $input)
}Disponibile anche come: Comando CLI vulnara dissociate_git_token_with_git_entity
dockerScanToolQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce DockerScanTool!
query DockerScanTool($id: ID!) {
dockerScanTool(id: $id) {
id
categories
enabled
}
}Disponibile anche come: Tool MCP docker_scan_tool
dockerScanToolsQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce DockerScanToolListResult!
query DockerScanTools($list: List) {
dockerScanTools(list: $list) {
total
items {
id
categories
enabled
}
}
}Disponibile anche come: Comando CLI vulnara docker_scan_tools · Tool MCP docker_scan_tools
downgradeToFreeMutation
Restituisce Boolean!
mutation DowngradeToFree {
downgradeToFree
}exploitedFindingsQuery
KEV first, then by EPSS. epssMin defaults to 0.1.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| epssMin | Float | |
| limit | Int |
Restituisce ExploitedFindingList!
query ExploitedFindings($epssMin: Float, $limit: Int) {
exploitedFindings(epssMin: $epssMin, limit: $limit) {
items {
targetType
targetId
targetName
findingType
matchKey
title
installedVersion
fixedVersion
}
total
kevCount
epssMin
kevSyncedAt
epssSyncedAt
epssDate
}
}Disponibile anche come: Tool MCP exploited_findings
fetchRepositoriesMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | FetchRepositoriesInput! |
Restituisce Boolean!
mutation FetchRepositories($input: FetchRepositoriesInput!) {
fetchRepositories(input: $input)
}Disponibile anche come: Comando CLI vulnara fetch_repositories
findingCorroborationQuery
Cross-tool agreement for every secret found in a repository.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| repositoryId | ID! |
Restituisce FindingCorroborationListResult!
query FindingCorroboration($repositoryId: ID!) {
findingCorroboration(repositoryId: $repositoryId) {
total
items {
id
matchHash
toolCount
severity
}
}
}Disponibile anche come: Comando CLI vulnara finding_corroboration · Tool MCP finding_corroboration
findingTriageQuery
Decisions in force on a repository's findings. With matchKey, only that finding's - what a finding's drawer needs.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| repositoryId | ID! | |
| matchKey | String |
Restituisce [FindingTriage!]!
query FindingTriage($repositoryId: ID!, $matchKey: String) {
findingTriage(repositoryId: $repositoryId, matchKey: $matchKey) {
id
repositoryId
matchKey
findingType
state
justification
response
priority
}
}Disponibile anche come: Comando CLI vulnara finding_triage · Tool MCP finding_triage
findingTriageHistoryQuery
Every decision ever taken on this repository's findings, newest first.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| repositoryId | ID! | |
| matchKey | String |
Restituisce [FindingTriageEvent!]!
query FindingTriageHistory($repositoryId: ID!, $matchKey: String) {
findingTriageHistory(repositoryId: $repositoryId, matchKey: $matchKey) {
id
repositoryId
matchKey
action
state
justification
response
priority
}
}Disponibile anche come: Tool MCP finding_triage_history
gitEntitiesQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce GitEntityListResult!
query GitEntities($list: List) {
gitEntities(list: $list) {
total
}
}Disponibile anche come: Comando CLI vulnara git_entities · Tool MCP git_entities
gitEntityQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce GitEntity!
query GitEntity($id: ID!) {
gitEntity(id: $id) {
__typename
... on Organization {
id
name
gitType
externalId
webUrl
htmlUrl
avatarUrl
color
}
... on GitUser {
id
name
gitType
externalId
webUrl
htmlUrl
avatarUrl
color
}
}
}Disponibile anche come: Comando CLI vulnara git_entity · Tool MCP git_entity
gitEntityProvidersQuery
Providers on which a bare handle resolves to an org/user/group. Lets the add-workspace form infer the provider automatically and only ask the user to choose when the same handle exists on more than one provider.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| name | String! |
Restituisce [GitType!]!
query GitEntityProviders($name: String!) {
gitEntityProviders(name: $name)
}Disponibile anche come: Comando CLI vulnara git_entity_providers
gitEntityRepositoryCountQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| name | String! | |
| gitType | GitType! |
Restituisce Int
query GitEntityRepositoryCount($name: String!, $gitType: GitType!) {
gitEntityRepositoryCount(name: $name, gitType: $gitType)
}gitTokenQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce GitToken!
query GitToken($id: ID!) {
gitToken(id: $id) {
id
name
value
expiresAt
flags
status
scopes
createdAt
}
}Disponibile anche come: Comando CLI vulnara git_token
gitTokenExpirationQuery
The token's own expiry as reported by its git provider, or null if the provider doesn't expose one or the token couldn't be checked. Lets the UI hide the manual "expires at" field when the token reports it itself.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| value | String! | |
| gitType | GitType! |
Restituisce DateTime
query GitTokenExpiration($value: String!, $gitType: GitType!) {
gitTokenExpiration(value: $value, gitType: $gitType)
}gitTokensQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce GitTokenListResult!
query GitTokens($list: List) {
gitTokens(list: $list) {
total
items {
id
name
value
expiresAt
flags
status
scopes
createdAt
}
}
}Disponibile anche come: Comando CLI vulnara git_tokens
gitUserQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce GitEntity!
query GitUser($id: ID!) {
gitUser(id: $id) {
__typename
... on Organization {
id
name
gitType
externalId
webUrl
htmlUrl
avatarUrl
color
}
... on GitUser {
id
name
gitType
externalId
webUrl
htmlUrl
avatarUrl
color
}
}
}Disponibile anche come: Tool MCP git_user
gitUsersQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce GitEntityListResult!
query GitUsers($list: List) {
gitUsers(list: $list) {
total
}
}Disponibile anche come: Tool MCP git_users
invitationQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Invitation
query Invitation($id: ID!) {
invitation(id: $id) {
id
email
tenantName
}
}invitationsQuery
Restituisce [Invitation!]!
query Invitations {
invitations {
id
email
tenantName
}
}inviteTenantMemberMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | InviteTeamMemberInput! |
Restituisce Boolean!
mutation InviteTenantMember($input: InviteTeamMemberInput!) {
inviteTenantMember(input: $input)
}invoiceQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Invoice!
query Invoice($id: ID!) {
invoice(id: $id) {
id
invoiceNumber
date
dueDate
status
total
currency
}
}invoicesQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce InvoiceListResult!
query Invoices($list: List) {
invoices(list: $list) {
total
items {
id
invoiceNumber
date
dueDate
status
total
currency
}
}
}linkRiskMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| input | LinkRiskInput! |
Restituisce RiskLink!
mutation LinkRisk($id: ID!, $input: LinkRiskInput!) {
linkRisk(id: $id, input: $input) {
id
targetType
targetId
matchKey
findingType
title
severity
createdBy
}
}Disponibile anche come: Tool MCP link_risk
markAllNotificationsReadMutation
Restituisce Boolean!
mutation MarkAllNotificationsRead {
markAllNotificationsRead
}Disponibile anche come: Comando CLI vulnara mark_all_notifications_read
markNotificationDeliveredMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Boolean!
mutation MarkNotificationDelivered($id: ID!) {
markNotificationDelivered(id: $id)
}Disponibile anche come: Comando CLI vulnara mark_notification_delivered
markNotificationsReadMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| ids | [ID!]! |
Restituisce Boolean!
mutation MarkNotificationsRead($ids: [ID!]!) {
markNotificationsRead(ids: $ids)
}Disponibile anche come: Comando CLI vulnara mark_notifications_read
myAiAccessQuery
The caller's own AI write access in the current tenant.
Restituisce AiAccessLevel!
query MyAiAccess {
myAiAccess
}Disponibile anche come: Tool MCP my_ai_access
myUserQuery
Restituisce MyUser
query MyUser {
myUser {
id
email
name
username
tenants {
id
isPaying
}
preferences {
theme
dateTimeFormat
repositoriesView
}
}
}Disponibile anche come: Tool MCP my_user
networkQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Network!
query Network($id: ID!) {
network(id: $id) {
id
name
network
networkType
tenant
securityScore
createdAt
updatedAt
}
}Disponibile anche come: Comando CLI vulnara network · Tool MCP network
networksQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce NetworkListResult!
query Networks($list: List) {
networks(list: $list) {
total
items {
id
name
network
networkType
tenant
securityScore
createdAt
updatedAt
}
}
}Disponibile anche come: Comando CLI vulnara networks · Tool MCP networks
networkScanFindingQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce NetworkScanFinding!
query NetworkScanFinding($id: ID!) {
networkScanFinding(id: $id) {
id
scanResultId
host
hostname
hostnameType
protocol
port
serviceName
}
}Disponibile anche come: Tool MCP network_scan_finding
networkScanFindingsQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce NetworkScanFindingListResult!
query NetworkScanFindings($list: List) {
networkScanFindings(list: $list) {
total
items {
id
scanResultId
host
hostname
hostnameType
protocol
port
serviceName
}
}
}Disponibile anche come: Comando CLI vulnara network_scan_findings · Tool MCP network_scan_findings
networkScanResultQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce NetworkScanResult!
query NetworkScanResult($id: ID!) {
networkScanResult(id: $id) {
id
networkId
status
createdAt
updatedAt
scanTime
network {
id
name
network
networkType
tenant
securityScore
createdAt
updatedAt
}
}
}Disponibile anche come: Comando CLI vulnara network_scan_result · Tool MCP network_scan_result
networkScanResultsQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce NetworkScanResultListResult!
query NetworkScanResults($list: List) {
networkScanResults(list: $list) {
total
items {
id
networkId
status
createdAt
updatedAt
scanTime
}
}
}Disponibile anche come: Comando CLI vulnara network_scan_results · Tool MCP network_scan_results
notificationsQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce NotificationList!
query Notifications($list: List) {
notifications(list: $list) {
items {
id
type
eventType
data
read
createdAt
}
total
}
}Disponibile anche come: Comando CLI vulnara notifications · Tool MCP notifications
notificationsSubscription
Restituisce Notification!
subscription Notifications {
notifications {
id
type
eventType
data
read
createdAt
}
}Disponibile anche come: Tool MCP notifications
notificationScopeQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce NotificationScope!
query NotificationScope($id: ID!) {
notificationScope(id: $id) {
id
channelIds
channelType
scopes
isActive
status
headers {
name
value
}
template
}
}Disponibile anche come: Comando CLI vulnara notification_scope · Tool MCP notification_scope
notificationScopesQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce NotificationScopeListResult!
query NotificationScopes($list: List) {
notificationScopes(list: $list) {
total
items {
id
channelIds
channelType
scopes
isActive
status
template
}
}
}Disponibile anche come: Comando CLI vulnara notification_scopes · Tool MCP notification_scopes
organizationQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce GitEntity!
query Organization($id: ID!) {
organization(id: $id) {
__typename
... on Organization {
id
name
gitType
externalId
webUrl
htmlUrl
avatarUrl
color
}
... on GitUser {
id
name
gitType
externalId
webUrl
htmlUrl
avatarUrl
color
}
}
}Disponibile anche come: Tool MCP organization
organizationsQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce GitEntityListResult!
query Organizations($list: List) {
organizations(list: $list) {
total
}
}Disponibile anche come: Tool MCP organizations
paymentMethodQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce PaymentMethod!
query PaymentMethod($id: ID!) {
paymentMethod(id: $id) {
id
default
lastFour
brand
expiryMonth
expiryYear
cardholderName
expired
}
}paymentMethodsQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce PaymentMethodListResult!
query PaymentMethods($list: List) {
paymentMethods(list: $list) {
total
items {
id
default
lastFour
brand
expiryMonth
expiryYear
cardholderName
expired
}
}
}plansQuery
Restituisce [Plan!]!
query Plans {
plans {
id
availableGitScanMinutes
availableNetworkScanMinutes
maxRepositories
maxNetworks
maxEmails
pricePerGitScanMinute
pricePerNetworkScanMinute
}
}programmingLanguagesQuery
Restituisce [String!]
query ProgrammingLanguages {
programmingLanguages
}Disponibile anche come: Comando CLI vulnara programming_languages · Tool MCP programming_languages
promoGrantsQuery
Every grant this tenant holds, including ones that have run out.
Restituisce [PromoGrant!]!
query PromoGrants {
promoGrants {
id
code
startsAt
endsAt
gitScanMinutes
networkScanMinutes
maxRepositories
maxNetworks
}
}provisionNetworkAgentMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | ProvisionNetworkAgentInput! |
Restituisce ProvisionNetworkAgentPayload!
mutation ProvisionNetworkAgent($input: ProvisionNetworkAgentInput!) {
provisionNetworkAgent(input: $input) {
agent {
id
status
lastSeenAt
createdAt
routeApproved
}
preauthKey
installCommand
}
}redeemPromoCodeMutation
Redeem a code for this tenant. ADMIN because redeeming changes what the tenant may spend, which is the same authority as changing the plan. A refusal arrives as PROMO_CODE_UNKNOWN, PROMO_CODE_INACTIVE, PROMO_CODE_EXPIRED, PROMO_CODE_FULLY_CLAIMED or PROMO_CODE_ALREADY_REDEEMED. They are distinct because each tells the person typing the code something different about what to do next.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| code | String! |
Restituisce PromoGrant!
mutation RedeemPromoCode($code: String!) {
redeemPromoCode(code: $code) {
id
code
startsAt
endsAt
gitScanMinutes
networkScanMinutes
maxRepositories
maxNetworks
}
}registerPushSubscriptionMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | PushSubscriptionInput! |
Restituisce Boolean!
mutation RegisterPushSubscription($input: PushSubscriptionInput!) {
registerPushSubscription(input: $input)
}Disponibile anche come: Comando CLI vulnara register_push_subscription
remediateDependencyFindingMutation
Ask an AI agent to upgrade the library behind one dependency finding, covering every advisory for it in that scan. Same issue, pull request and errors as remediateScanFinding.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | RemediateFindingInput! |
Restituisce Boolean!
mutation RemediateDependencyFinding($input: RemediateFindingInput!) {
remediateDependencyFinding(input: $input)
}remediateScanFindingMutation
Ask an AI agent to fix one code finding: its issue is opened or reused, and the fix arrives as a pull request on the finding once ready. Fails with PULL_REQUEST_OPEN while one is open and NO_GIT_TOKEN when no token can open one on the repository.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | RemediateFindingInput! |
Restituisce Boolean!
mutation RemediateScanFinding($input: RemediateFindingInput!) {
remediateScanFinding(input: $input)
}remediationTemplateQuery
Restituisce RemediationTemplate!
query RemediationTemplate {
remediationTemplate {
codeIssueBody
dependencyIssueBody
pullRequestBody
}
}Disponibile anche come: Comando CLI vulnara remediation_template · Tool MCP remediation_template
removeWebTargetSignInMethodMutation
Remove one sign-in method from a web target, keeping the others.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| webTargetId | ID! | |
| methodId | ID! |
Restituisce WebTarget!
mutation RemoveWebTargetSignInMethod($webTargetId: ID!, $methodId: ID!) {
removeWebTargetSignInMethod(webTargetId: $webTargetId, methodId: $methodId) {
id
name
baseUrl
scheme
host
port
scopePaths
excludedPaths
}
}repositoriesQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce RepositoryListResult!
query Repositories($list: List) {
repositories(list: $list) {
total
items {
id
gitEntityId
repositoryName
private
securityScore
programmingLanguage
repositorySize
numberOfBranches
}
}
}Disponibile anche come: Comando CLI vulnara repositories · Tool MCP repositories
repositoryQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Repository!
query Repository($id: ID!) {
repository(id: $id) {
id
gitEntityId
repositoryName
private
securityScore
programmingLanguage
repositorySize
numberOfBranches
}
}Disponibile anche come: Comando CLI vulnara repository · Tool MCP repository
repositoryBranchesQuery
Branch names for a repository, read from its git provider, so the scan form can offer real branches instead of free-text input.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| repositoryId | ID! |
Restituisce [String!]!
query RepositoryBranches($repositoryId: ID!) {
repositoryBranches(repositoryId: $repositoryId)
}Disponibile anche come: Comando CLI vulnara repository_branches · Tool MCP repository_branches
repositoryDependencyScanFindingGroupFacetCountsQuery
Severity and issue-state counts of the tenant-wide repositoryDependencyScanFindingGroups.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce FindingFacetCounts!
query RepositoryDependencyScanFindingGroupFacetCounts($list: List) {
repositoryDependencyScanFindingGroupFacetCounts(list: $list) {
severity {
severity
count
}
issueState {
issueState
count
}
}
}Disponibile anche come: Tool MCP repository_dependency_scan_finding_group_facet_counts
repositoryDependencyScanFindingGroupsQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce RepositoryDependencyScanFindingGroupListResult!
query RepositoryDependencyScanFindingGroups($list: List) {
repositoryDependencyScanFindingGroups(list: $list) {
total
items {
id
dependency
repositoryId
severity
installedVersion
occurrences
issueUrl
issueStatus
}
}
}Disponibile anche come: Comando CLI vulnara repository_dependency_scan_finding_groups · Tool MCP repository_dependency_scan_finding_groups
repositoryDependencyScanFindingsQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce RepositoryDependencyScanFindingListResult!
query RepositoryDependencyScanFindings($list: List) {
repositoryDependencyScanFindings(list: $list) {
total
items {
id
commitScanId
createdAt
updatedAt
severity
category
vulnerability
dependency
}
}
}Disponibile anche come: Comando CLI vulnara repository_dependency_scan_findings · Tool MCP repository_dependency_scan_findings
requestNSFConsultationMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | NSFConsultation! |
Restituisce Boolean!
mutation RequestNSFConsultation($input: NSFConsultation!) {
requestNSFConsultation(input: $input)
}Disponibile anche come: Comando CLI vulnara request_nsf_consultation
requestRSFConsultationMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | RSFConsultation! |
Restituisce Boolean!
mutation RequestRSFConsultation($input: RSFConsultation!) {
requestRSFConsultation(input: $input)
}Disponibile anche come: Comando CLI vulnara request_rsf_consultation
retryPaymentMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| invoiceId | ID! | |
| paymentMethodId | ID! |
Restituisce Invoice!
mutation RetryPayment($invoiceId: ID!, $paymentMethodId: ID!) {
retryPayment(invoiceId: $invoiceId, paymentMethodId: $paymentMethodId) {
id
invoiceNumber
date
dueDate
status
total
currency
}
}revealScanFindingMatchMutation
The audited path to the raw secret behind a masked ScanFinding/ScanFindingGroup/ ScanFindingMatchGroup.match. Every call is logged with the caller, repository and match hash.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| repositoryId | ID! | |
| matchHash | String! |
Restituisce String!
mutation RevealScanFindingMatch($repositoryId: ID!, $matchHash: String!) {
revealScanFindingMatch(repositoryId: $repositoryId, matchHash: $matchHash)
}reviewRiskMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| input | ReviewRiskInput! |
Restituisce Risk!
mutation ReviewRisk($id: ID!, $input: ReviewRiskInput!) {
reviewRisk(id: $id, input: $input) {
id
reference
title
scenario
category
status
owner
treatment
}
}Disponibile anche come: Tool MCP review_risk
revokeRiskAcceptanceMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Risk!
mutation RevokeRiskAcceptance($id: ID!) {
revokeRiskAcceptance(id: $id) {
id
reference
title
scenario
category
status
owner
treatment
}
}riskQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Risk!
query Risk($id: ID!) {
risk(id: $id) {
id
reference
title
scenario
category
status
owner
treatment
}
}Disponibile anche come: Tool MCP risk
riskRegisterExportQuery
Restituisce RiskExport!
query RiskRegisterExport {
riskRegisterExport {
contentType
content
}
}Disponibile anche come: Tool MCP risk_register_export
risksQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| filter | RiskFilter | |
| skip | Int | |
| limit | Int |
Restituisce RiskList!
query Risks($filter: RiskFilter, $skip: Int, $limit: Int) {
risks(filter: $filter, skip: $skip, limit: $limit) {
items {
id
reference
title
scenario
category
status
owner
treatment
}
total
}
}Disponibile anche come: Tool MCP risks
riskSettingsQuery
Restituisce RiskSettings!
query RiskSettings {
riskSettings {
levelCriteria {
level
acceptRole
maxDays
reviewDays
}
requireDistinctAcceptor
requireAcceptedRiskForWillNotFix
autoDraftExploitedRisks
updatedBy
updatedAt
}
}Disponibile anche come: Tool MCP risk_settings
riskSummaryQuery
Restituisce RiskSummary!
query RiskSummary {
riskSummary {
total
open
byStatus {
status
count
}
byLevel {
level
count
}
inherentMatrix {
likelihood
impact
count
}
residualMatrix {
likelihood
impact
count
}
reviewOverdue
acceptancesExpiring
}
}Disponibile anche come: Tool MCP risk_summary
saveAssetContextMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | AssetContextInput! |
Restituisce AssetContext!
mutation SaveAssetContext($input: AssetContextInput!) {
saveAssetContext(input: $input) {
targetType
targetId
businessCriticality
environment
dataClassification
owner
updatedBy
updatedAt
}
}Disponibile anche come: Tool MCP save_asset_context
saveRiskSettingsMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | RiskSettingsInput! |
Restituisce RiskSettings!
mutation SaveRiskSettings($input: RiskSettingsInput!) {
saveRiskSettings(input: $input) {
levelCriteria {
level
acceptRole
maxDays
reviewDays
}
requireDistinctAcceptor
requireAcceptedRiskForWillNotFix
autoDraftExploitedRisks
updatedBy
updatedAt
}
}scanCategoriesQuery
Restituisce [ScanCategory!]!
query ScanCategories {
scanCategories
}Disponibile anche come: Comando CLI vulnara scan_categories · Tool MCP scan_categories
scanFindingGroupsQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce ScanFindingGroupListResult!
query ScanFindingGroups($list: List) {
scanFindingGroups(list: $list) {
total
items {
id
fingerprint
matchHash
matchedByToolCount
file
severity
confidence
match
}
}
}Disponibile anche come: Comando CLI vulnara scan_finding_groups · Tool MCP scan_finding_groups
scanFindingMatchGroupFacetCountsQuery
Severity and issue-state counts of scanFindingMatchGroups under the same filters.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce FindingFacetCounts!
query ScanFindingMatchGroupFacetCounts($list: List) {
scanFindingMatchGroupFacetCounts(list: $list) {
severity {
severity
count
}
issueState {
issueState
count
}
}
}Disponibile anche come: Tool MCP scan_finding_match_group_facet_counts
scanFindingMatchGroupsQuery
Findings grouped by cross-tool identity, one row per real secret.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce ScanFindingMatchGroupListResult!
query ScanFindingMatchGroups($list: List) {
scanFindingMatchGroups(list: $list) {
total
items {
id
matchHash
file
line
severity
confidence
match
occurrences
}
}
}Disponibile anche come: Comando CLI vulnara scan_finding_match_groups · Tool MCP scan_finding_match_groups
scanFindingsQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce ScanFindingListResult!
query ScanFindings($list: List) {
scanFindings(list: $list) {
total
items {
id
commitScanId
createdAt
updatedAt
line
file
severity
confidence
}
}
}Disponibile anche come: Comando CLI vulnara scan_findings · Tool MCP scan_findings
scanResultQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce ScanResult!
query ScanResult($id: ID!) {
scanResult(id: $id) {
id
repositoryId
scanType
dockerScanToolId
status
createdAt
updatedAt
scanTime
}
}Disponibile anche come: Comando CLI vulnara scan_result · Tool MCP scan_result
scanResultsQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce ScanResultListResult!
query ScanResults($list: List) {
scanResults(list: $list) {
total
items {
id
repositoryId
scanType
dockerScanToolId
status
createdAt
updatedAt
scanTime
}
}
}Disponibile anche come: Comando CLI vulnara scan_results · Tool MCP scan_results
scanScheduleQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce ScanSchedule!
query ScanSchedule($id: ID!) {
scanSchedule(id: $id) {
id
action
repositoryId
gitEntityId
webTargetId
networkId
branch
category
}
}Disponibile anche come: Tool MCP scan_schedule
scanSchedulesQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce ScanScheduleListResult!
query ScanSchedules($list: List) {
scanSchedules(list: $list) {
total
items {
id
action
repositoryId
gitEntityId
webTargetId
networkId
branch
category
}
}
}Disponibile anche come: Comando CLI vulnara scan_schedules · Tool MCP scan_schedules
serviceAccountsQuery
Restituisce [ServiceAccount!]!
query ServiceAccounts {
serviceAccounts {
id
name
isActive
expiresAt
createdBy {
id
email
username
name
}
}
}Disponibile anche come: Comando CLI vulnara service_accounts
setDastFindingTriageMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | SetDastFindingTriageInput! |
Restituisce DastFindingTriage!
mutation SetDastFindingTriage($input: SetDastFindingTriageInput!) {
setDastFindingTriage(input: $input) {
id
webTargetId
matchKey
state
justification
response
priority
reason
}
}Disponibile anche come: Comando CLI vulnara set_dast_finding_triage
setDefaultPaymentMethodMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Boolean!
mutation SetDefaultPaymentMethod($id: ID!) {
setDefaultPaymentMethod(id: $id)
}setFindingTriageMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | SetFindingTriageInput! |
Restituisce FindingTriage!
mutation SetFindingTriage($input: SetFindingTriageInput!) {
setFindingTriage(input: $input) {
id
repositoryId
matchKey
findingType
state
justification
response
priority
}
}Disponibile anche come: Comando CLI vulnara set_finding_triage · Tool MCP set_finding_triage
setGitEntityIgnorePathsMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | SetGitEntityIgnorePathsInput! |
Restituisce GitEntity!
mutation SetGitEntityIgnorePaths($input: SetGitEntityIgnorePathsInput!) {
setGitEntityIgnorePaths(input: $input) {
__typename
... on Organization {
id
name
gitType
externalId
webUrl
htmlUrl
avatarUrl
color
}
... on GitUser {
id
name
gitType
externalId
webUrl
htmlUrl
avatarUrl
color
}
}
}Disponibile anche come: Comando CLI vulnara set_git_entity_ignore_paths · Tool MCP set_git_entity_ignore_paths
setRemediationTemplateMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | RemediationTemplateInput! |
Restituisce RemediationTemplate!
mutation SetRemediationTemplate($input: RemediationTemplateInput!) {
setRemediationTemplate(input: $input) {
codeIssueBody
dependencyIssueBody
pullRequestBody
}
}Disponibile anche come: Comando CLI vulnara set_remediation_template
setRepositoryEnabledMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | SetRepositoryEnabledInput! |
Restituisce Boolean!
mutation SetRepositoryEnabled($input: SetRepositoryEnabledInput!) {
setRepositoryEnabled(input: $input)
}Disponibile anche come: Comando CLI vulnara set_repository_enabled · Tool MCP set_repository_enabled
setRepositoryIgnorePathsMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | SetRepositoryIgnorePathsInput! |
Restituisce Repository!
mutation SetRepositoryIgnorePaths($input: SetRepositoryIgnorePathsInput!) {
setRepositoryIgnorePaths(input: $input) {
id
gitEntityId
repositoryName
private
securityScore
programmingLanguage
repositorySize
numberOfBranches
}
}Disponibile anche come: Comando CLI vulnara set_repository_ignore_paths · Tool MCP set_repository_ignore_paths
setServiceAccountActiveMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | SetServiceAccountActiveInput! |
Restituisce ServiceAccount!
mutation SetServiceAccountActive($input: SetServiceAccountActiveInput!) {
setServiceAccountActive(input: $input) {
id
name
isActive
expiresAt
createdBy {
id
email
username
name
}
}
}Disponibile anche come: Comando CLI vulnara set_service_account_active
setWebTargetCredentialsMutation
Give scans of a web target sign-in credentials, replacing any already set. Scans then act as that user: use a dedicated low-privilege test account. The secret is stored encrypted and never returned.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | SetWebTargetCredentialsInput! |
Restituisce WebTarget!
mutation SetWebTargetCredentials($input: SetWebTargetCredentialsInput!) {
setWebTargetCredentials(input: $input) {
id
name
baseUrl
scheme
host
port
scopePaths
excludedPaths
}
}startNetworkScanMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | StartNetworkScanInput! |
Restituisce Boolean!
mutation StartNetworkScan($input: StartNetworkScanInput!) {
startNetworkScan(input: $input)
}Disponibile anche come: Comando CLI vulnara start_network_scan · Tool MCP start_network_scan
startRepositoryCategoryScanMutation
Scan by category: every scanner serving it that this tenant may run.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | StartRepositoryCategoryScanInput! |
Restituisce RepositoryCategoryScanDispatch!
mutation StartRepositoryCategoryScan($input: StartRepositoryCategoryScanInput!) {
startRepositoryCategoryScan(input: $input) {
category
taskId
scanResultIds
requested
queued
skipped {
reason
}
}
}Disponibile anche come: Comando CLI vulnara start_repository_category_scan
startRepositoryScanMutation
Names one scanner by id. Superseded by startRepositoryCategoryScan, and kept working: it is what the GitHub Action's scan-tools input and the CLI flag send from customers' own repositories.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | StartRepositoryScanInput! |
Restituisce RepositoryScanTask!
mutation StartRepositoryScan($input: StartRepositoryScanInput!) {
startRepositoryScan(input: $input) {
id
objectId
status
state {
totalCommits
scheduled
scanned
failed
parsed
}
createdAt
scanResult {
id
repositoryId
scanType
dockerScanToolId
status
createdAt
updatedAt
scanTime
}
}
}Disponibile anche come: Comando CLI vulnara start_repository_scan · Tool MCP start_repository_scan
startWebScanMutation
Start a dynamic scan of one web target. Follow it with task/taskEvents; cancel it with cancelTask.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | StartWebScanInput! |
Restituisce WebScanTask!
mutation StartWebScan($input: StartWebScanInput!) {
startWebScan(input: $input) {
id
objectId
status
state {
totalHosts
processedHosts
currentHost
}
createdAt
webScanResult {
id
webTargetId
status
securityScore
scanTime
pinnedAddresses
createdAt
updatedAt
}
}
}Disponibile anche come: Comando CLI vulnara start_web_scan
statisticsQuery
Restituisce TenantStatistics!
query Statistics {
statistics {
tenant
totalUsers
totalGitEntities
totalRepositories
totalNetworks
}
}Disponibile anche come: Tool MCP statistics
taskQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce Task!
query Task($id: ID!) {
task(id: $id) {
__typename
... on RepositoryScanTask {
id
objectId
status
createdAt
}
... on NetworkScanTask {
id
objectId
status
createdAt
}
}
}Disponibile anche come: Tool MCP task
taskEventsSubscription
Restituisce TaskEvent!
subscription TaskEvents {
taskEvents {
type
taskId
}
}tasksQuery
Restituisce [Task!]!
query Tasks {
tasks {
__typename
... on RepositoryScanTask {
id
objectId
status
createdAt
}
... on NetworkScanTask {
id
objectId
status
createdAt
}
}
}Disponibile anche come: Comando CLI vulnara tasks · Tool MCP tasks
tenantPostureQuery
Restituisce TenantPosture!
query TenantPosture {
tenantPosture {
averageSecurityScore
severityCounts {
severity
count
}
}
}Disponibile anche come: Tool MCP tenant_posture
termsAcceptanceQuery
The caller's own acceptance of the Platform Terms in the current tenant.
Restituisce TermsAcceptanceStatus!
query TermsAcceptance {
termsAcceptance {
currentVersion
currentUrl
acceptedVersion
acceptedBy
acceptedAt
isCurrent
}
}Disponibile anche come: Comando CLI vulnara terms_acceptance · Tool MCP terms_acceptance
testNotificationScopeMutation
Send a test notification to the rule's channel and record its reachability as the channel status.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce NotificationScope!
mutation TestNotificationScope($id: ID!) {
testNotificationScope(id: $id) {
id
channelIds
channelType
scopes
isActive
status
headers {
name
value
}
template
}
}Disponibile anche come: Comando CLI vulnara test_notification_scope · Tool MCP test_notification_scope
transferGitEntityMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | TransferGitEntityInput! |
Restituisce Boolean!
mutation TransferGitEntity($input: TransferGitEntityInput!) {
transferGitEntity(input: $input)
}Disponibile anche come: Comando CLI vulnara transfer_git_entity
transferNetworkMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | TransferNetworkInput! |
Restituisce Boolean!
mutation TransferNetwork($input: TransferNetworkInput!) {
transferNetwork(input: $input)
}Disponibile anche come: Comando CLI vulnara transfer_network
triageExceptionsQuery
Every exception in force across the tenant, code and DAST. With expiringWithinDays, only those lapsing within it.
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| expiringWithinDays | Int |
Restituisce [TriageException!]!
query TriageExceptions($expiringWithinDays: Int) {
triageExceptions(expiringWithinDays: $expiringWithinDays) {
targetType
targetId
targetName
matchKey
findingType
state
justification
response
}
}Disponibile anche come: Tool MCP triage_exceptions
unlinkRiskMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| linkId | ID! |
Restituisce Boolean!
mutation UnlinkRisk($id: ID!, $linkId: ID!) {
unlinkRisk(id: $id, linkId: $linkId)
}unreadNotificationCountQuery
Restituisce Int!
query UnreadNotificationCount {
unreadNotificationCount
}Disponibile anche come: Comando CLI vulnara unread_notification_count · Tool MCP unread_notification_count
unregisterPushSubscriptionMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| endpoint | String! |
Restituisce Boolean!
mutation UnregisterPushSubscription($endpoint: String!) {
unregisterPushSubscription(endpoint: $endpoint)
}Disponibile anche come: Comando CLI vulnara unregister_push_subscription
updateGitEntityMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | UpdateGitEntityInput! |
Restituisce GitEntity!
mutation UpdateGitEntity($input: UpdateGitEntityInput!) {
updateGitEntity(input: $input) {
__typename
... on Organization {
id
name
gitType
externalId
webUrl
htmlUrl
avatarUrl
color
}
... on GitUser {
id
name
gitType
externalId
webUrl
htmlUrl
avatarUrl
color
}
}
}updateGitTokenMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | UpdateGitTokenInput! |
Restituisce GitToken!
mutation UpdateGitToken($input: UpdateGitTokenInput!) {
updateGitToken(input: $input) {
id
name
value
expiresAt
flags
status
scopes
createdAt
}
}Disponibile anche come: Comando CLI vulnara update_git_token
updateMyUserPreferencesMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | UpdateUserPreferencesInput! |
Restituisce UserPreferences!
mutation UpdateMyUserPreferences($input: UpdateUserPreferencesInput!) {
updateMyUserPreferences(input: $input) {
theme
dateTimeFormat
repositoriesView
}
}updateNotificationScopeMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | UpdateNotificationScopeInput! |
Restituisce NotificationScope!
mutation UpdateNotificationScope($input: UpdateNotificationScopeInput!) {
updateNotificationScope(input: $input) {
id
channelIds
channelType
scopes
isActive
status
headers {
name
value
}
template
}
}Disponibile anche come: Comando CLI vulnara update_notification_scope
updateRiskMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| input | UpdateRiskInput! |
Restituisce Risk!
mutation UpdateRisk($id: ID!, $input: UpdateRiskInput!) {
updateRisk(id: $id, input: $input) {
id
reference
title
scenario
category
status
owner
treatment
}
}Disponibile anche come: Tool MCP update_risk
updateRiskActionMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| actionId | ID! | |
| input | UpdateRiskActionInput! |
Restituisce RiskAction!
mutation UpdateRiskAction($id: ID!, $actionId: ID!, $input: UpdateRiskActionInput!) {
updateRiskAction(id: $id, actionId: $actionId, input: $input) {
id
description
owner
dueAt
status
issueUrl
completedAt
createdAt
}
}Disponibile anche come: Tool MCP update_risk_action
updateScanScheduleMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | UpdateScanScheduleInput! |
Restituisce ScanSchedule!
mutation UpdateScanSchedule($input: UpdateScanScheduleInput!) {
updateScanSchedule(input: $input) {
id
action
repositoryId
gitEntityId
webTargetId
networkId
branch
category
}
}Disponibile anche come: Comando CLI vulnara update_scan_schedule
updateUserAiAccessMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | UpdateUserAiAccessInput! |
Restituisce TenantUser!
mutation UpdateUserAiAccess($input: UpdateUserAiAccessInput!) {
updateUserAiAccess(input: $input) {
id
roles
aiAccess
user {
id
email
username
name
}
}
}updateUserRolesMutation
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| input | UpdateUserRolesInput! |
Restituisce TenantUser!
mutation UpdateUserRoles($input: UpdateUserRolesInput!) {
updateUserRoles(input: $input) {
id
roles
aiAccess
user {
id
email
username
name
}
}
}upgradeToPayingMutation
Restituisce Boolean!
mutation UpgradeToPaying {
upgradeToPaying
}usageQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| startDate | DateTime! | |
| endDate | DateTime! |
Restituisce Usage!
query Usage($startDate: DateTime!, $endDate: DateTime!) {
usage(startDate: $startDate, endDate: $endDate) {
accountTier
usedGitScanTimeMinutes
repositoryScanLimited
usedNetworkScanTimeMinutes
networkScanLimited
usedDastScanTimeMinutes
dastScanLimited
parallelScans
}
}webScanResultQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce WebScanResult!
query WebScanResult($id: ID!) {
webScanResult(id: $id) {
id
webTargetId
status
securityScore
scanTime
pinnedAddresses
createdAt
updatedAt
}
}Disponibile anche come: Comando CLI vulnara web_scan_result · Tool MCP web_scan_result
webScanResultsQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce WebScanResultListResult!
query WebScanResults($list: List) {
webScanResults(list: $list) {
total
items {
id
webTargetId
status
securityScore
scanTime
pinnedAddresses
createdAt
updatedAt
}
}
}Disponibile anche come: Comando CLI vulnara web_scan_results · Tool MCP web_scan_results
webTargetQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
Restituisce WebTarget!
query WebTarget($id: ID!) {
webTarget(id: $id) {
id
name
baseUrl
scheme
host
port
scopePaths
excludedPaths
}
}Disponibile anche come: Comando CLI vulnara web_target · Tool MCP web_target
webTargetsQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List |
Restituisce WebTargetListResult!
query WebTargets($list: List) {
webTargets(list: $list) {
total
items {
id
name
baseUrl
scheme
host
port
scopePaths
excludedPaths
}
}
}Disponibile anche come: Comando CLI vulnara web_targets · Tool MCP web_targets
workspaceOverviewQuery
Argomenti
| Nome | Tipo | Descrizione |
|---|---|---|
| gitEntityId | ID! |
Restituisce WorkspaceOverview!
query WorkspaceOverview($gitEntityId: ID!) {
workspaceOverview(gitEntityId: $gitEntityId) {
severityCounts {
severity
count
}
totalFindings
totalRepositories
scanned
unscanned
}
}Disponibile anche come: Comando CLI vulnara workspace_overview · Tool MCP workspace_overview
Tipi
AcceptRiskInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| expiresAt | DateTime | Defaults to the level's review interval; cannot exceed its maximum. |
| conditions | String |
AddWebTargetSignInMethodInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| webTargetId | ID! | |
| kind | WebTargetSignInKind! | |
| label | String | |
| secret | String! |
AgingBucket object
| Nome | Tipo | Descrizione |
|---|---|---|
| bucket | String! | Age range in days, such as 8-30 or 91+. |
| count | Int! |
AiAccessLevel enum
Whether an AI acting on this member's behalf (the embedded chat, or their own connected MCP client) may call a write tool, as opposed to only reading. Independent of TenantUserRole: WRITE here does nothing for a VIEWER, since the underlying mutations are already gated @tenantRole(requires: EDITOR) regardless.
| Nome | Descrizione |
|---|---|
| READ | |
| WRITE |
AssessRiskInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| kind | RiskAssessmentKind! | |
| likelihood | Int! | |
| impact | Int! | |
| rationale | String |
AssetContext object
Business context of an asset (NIST IR 8286D). Never feeds the security score.
| Nome | Tipo | Descrizione |
|---|---|---|
| targetType | RiskLinkTarget! | |
| targetId | ID! | |
| businessCriticality | Int | 1 (negligible) to 5 (critical to the business). |
| environment | AssetEnvironment | |
| dataClassification | DataClassification | |
| owner | String | |
| updatedBy | String | |
| updatedAt | DateTime |
AssetContextInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| targetType | RiskLinkTarget! | |
| targetId | ID! | |
| businessCriticality | Int | |
| environment | AssetEnvironment | |
| dataClassification | DataClassification | |
| owner | String |
AssetEnvironment enum
| Nome | Descrizione |
|---|---|
| production | |
| staging | |
| development | |
| other |
ChannelStatus enum
| Nome | Descrizione |
|---|---|
| operational | |
| degraded | |
| unknown | |
| error |
ChannelType enum
| Nome | Descrizione |
|---|---|
| slack | |
| webhook | |
| telegram | |
| discord |
ClearWebTargetCredentialsInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| webTargetId | ID! |
CommitScan object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| scanResultId | ID! | |
| commitHash | String! | |
| createdAt | DateTime | |
| updatedAt | DateTime | |
| scanResult | ScanResult! |
CommitScanListResult object
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| items | [CommitScan!]! |
CorroboratedFinding object
One finding that more than one scanner reported. Carries no matched value on purpose: a corroborated finding is very often a leaked secret, and the dashboard is the most widely viewed screen in the product. The repository and file identify it, and the view behind the link masks what it shows.
| Nome | Tipo | Descrizione |
|---|---|---|
| kind | String! | Either code or dependency. |
| repositoryId | ID! | |
| repositoryName | String! | |
| label | String | The file for a code finding, the library for a dependency finding. |
| severity | String! | |
| toolCount | Int! | How many scanners agreed. Which ones is not carried: the count is the signal. |
| findingKey | String! | The identity the vulnerabilities explorer addresses this finding by, usable directly as its matchHash filter. |
CreateGitEntityInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| name | String! | |
| gitType | GitType! | |
| externalId | String | |
| webUrl | String | |
| ignorePaths | [String!] | Gitignore-style glob patterns applied to every repo under this entity. |
| ownershipConsent | Boolean! | Attests that the caller's tenant owns this organisation/user, or is authorized to scan it. No default: the client must decide explicitly. Rejected unless true; the actor and statement version are added server-side, not taken from client input. |
CreateGitTokenInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| name | String! | |
| value | String! | |
| flags | [GitTokenFlag!]! | |
| gitTokenType | GitType! | |
| expiresAt | DateTime |
CreateNetworkInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| name | String! | |
| network | String! | |
| networkType | NetworkType! | |
| ownershipConsent | Boolean! |
CreateNotificationScopeInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| channelIds | [String!]! | |
| channelType | ChannelType! | |
| scopes | [String!]! | |
| isActive | Boolean! | |
| headers | [HttpHeaderInput!] | |
| templates | [NotificationTemplateInput!] |
CreateRepositoryInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| gitEntityId | ID! | |
| repositoryName | String! | |
| cloneUrl | String | |
| ignorePaths | [String!] | Gitignore-style glob patterns to exclude from scans. |
CreateRiskInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| title | String! | |
| scenario | String | |
| category | RiskCategory! | |
| owner | String | |
| treatment | RiskTreatment | |
| treatmentDescription | String | |
| tags | [String!] |
CreateScanScheduleInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| action | ScanScheduleAction | Defaults to SCAN. SYNC requires gitEntityId; a web target or a network only takes SCAN. |
| repositoryId | ID | Supply exactly one of repositoryId, gitEntityId, webTargetId or networkId. |
| gitEntityId | ID | |
| webTargetId | ID | A web target in the caller's tenant. Its schedule scans for DAST, which is implied when category is omitted. |
| networkId | ID | A network in the caller's tenant. Its schedule runs a network scan and takes no category. |
| branch | String | |
| category | ScanCategory | What to scan for. Required for a SCAN of a repository or a workspace, which never take DAST; implied as DAST for a web target, which takes nothing else. Refused for a network, whose scan has no category, and for a SYNC or a REPORT, which drop it the way they drop branch. |
| frequency | ScanScheduleFrequency! | |
| hourUtc | Int! | |
| minuteUtc | Int | |
| dayOfWeek | Int | |
| isActive | Boolean | |
| recipients | [String!] | Required for a REPORT, refused for anything else. |
CreateServiceAccountInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| name | String! | |
| expiresAt | DateTime! |
CreateServiceAccountPayload object
| Nome | Tipo | Descrizione |
|---|---|---|
| serviceAccount | ServiceAccount! | |
| token | String! |
CreateTenantInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| name | String! |
CreateWebTargetInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| name | String! | |
| baseUrl | String! | |
| scopePaths | [String!] | |
| excludedPaths | [String!] | |
| ownershipConsent | Boolean! |
Currency enum
| Nome | Descrizione |
|---|---|
| USD | |
| EUR | |
| BGN |
DashboardAnalytics object
| Nome | Tipo | Descrizione |
|---|---|---|
| days | Int! | The window the deltas and activity are measured over. |
| generatedAt | DateTime! | |
| lastScanAt | DateTime | |
| averageSecurityScore | Float! | |
| previousAverageSecurityScore | Float! | The same score as it stood at the start of the period. |
| severityCounts | [SeverityCount!]! | |
| previousSeverityCounts | [SeverityCount!]! | |
| exposure | Exposure! | |
| scanActivity | [ScanActivityPoint!]! | |
| scoreTrend | [ScoreTrendPoint!]! | |
| topRiskRepositories | [RepositoryRisk!]! | |
| remediation | RemediationFunnel! | |
| dependencyFixes | DependencyFixes! | |
| aging | [AgingBucket!]! | |
| oldestFindingDays | Int | |
| oldestCriticalDays | Int | |
| coverage | ScanCoverage! | |
| scanHealth | ScanHealth! | |
| staleWorkspaces | [StaleWorkspace!]! | |
| networks | DashboardNetworks | |
| webTargets | DashboardWebTargets |
DashboardNetworks object
Networks, from each one's latest successful scan. Not part of the repository severity counts or the security score.
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| scanned | Int! | Networks with at least one successful scan. |
| scheduled | Int! | Networks an active schedule scans. |
| openPorts | Int! | |
| exposedHosts | Int! | Hosts with at least one open port. |
| portStates | [PortStateCount!]! | |
| scans | DashboardTargetScans! | |
| lastScanAt | DateTime |
DashboardTargetScans object
Scans of one kind of target started in the period, and those running now.
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| succeeded | Int! | |
| failed | Int! | Failed and cancelled. |
| running | Int! |
DashboardWebTargets object
Web targets, from each one's latest successful scan. Not part of the repository severity counts or the security score.
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| scanned | Int! | Web targets with at least one successful scan. |
| scheduled | Int! | Web targets an active schedule scans. |
| severityCounts | [SeverityCount!]! | Open findings per severity, worst first. |
| openFindings | Int! | |
| deferred | Int! | Kept out of the list by a decision, but still a live risk. |
| dismissed | Int! | Decided to carry no risk: resolved, false positive or not affected. |
| scans | DashboardTargetScans! | |
| lastScanAt | DateTime |
DastFinding object
One issue a web scan found. Filter the list with fields severity, templateId, host, category (categoryEquals), webTargetId, scanResultId, matchHash, cveId and triageState (a TriageState, or none, any, dismissed or deferred). No field names the scanner that reported it.
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| scanResultId | ID! | |
| templateId | String! | The check that matched, e.g. a CVE id or a misconfiguration name. |
| name | String | |
| severity | Severity | |
| category | ScanCategory | |
| matchedAt | String! | The URL the check matched at. |
| host | String | |
| port | Int | |
| scheme | String | |
| matcherName | String | |
| extractedResults | [String!]! | |
| description | String | |
| reference | [String!]! | |
| cveIds | [String!]! | |
| cweIds | [String!]! | |
| cvssScore | Float | |
| templateTags | [String!]! | |
| matchHash | String | The identity a triage decision is filed under; stable across rescans. |
| issueUrl | String | |
| issueStatus | IssueStatus | |
| prUrl | String | |
| prStatus | PrStatus | |
| createdAt | DateTime! | |
| updatedAt | DateTime | |
| webScanResult | WebScanResult |
DastFindingListResult object
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| items | [DastFinding!]! |
DastFindingTriage object
A decision about a DAST finding: the same VEX axes as FindingTriage, filed per web target.
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| webTargetId | ID! | |
| matchKey | String! | |
| state | TriageState! | |
| justification | TriageJustification | |
| response | TriageResponse | |
| priority | TriagePriority | |
| reason | String! | |
| createdBy | String | |
| createdAt | DateTime! | |
| expiresAt | DateTime |
DastFindingTriageEvent object
One entry in a DAST finding's decision history. Append-only.
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| webTargetId | ID! | |
| matchKey | String! | |
| action | String! | set or reopen. |
| state | TriageState | |
| justification | TriageJustification | |
| response | TriageResponse | |
| priority | TriagePriority | |
| reason | String | |
| expiresAt | DateTime | |
| actor | String | |
| createdAt | DateTime! |
DataClassification enum
| Nome | Descrizione |
|---|---|
| public | |
| internal | |
| confidential | |
| restricted |
DependencyFixes object
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| fixable | Int! | Dependency findings whose advisory names a fixed version. |
DeprovisionNetworkAgentInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| networkId | ID! |
DockerScanTool object
A scanner, described by what it looks for.
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| categories | [ScanCategory!]! | The categories this scanner reports. A scanner serves one or more; a finding has exactly one. |
| enabled | Boolean! | The global catalogue flag, not the answer for a tenant: a tenant override can grant a globally disabled scanner or deny a globally enabled one. Ask `scanCategories` what this tenant may actually run. |
DockerScanToolListResult object
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| items | [DockerScanTool!]! |
ExploitedFinding object
A finding in the latest scans whose CVE is in CISA KEV or likely to be exploited (FIRST EPSS).
| Nome | Tipo | Descrizione |
|---|---|---|
| targetType | RiskLinkTarget! | |
| targetId | ID! | |
| targetName | String | |
| findingType | String! | dependency or dast. |
| matchKey | String! | The key its triage decision and a risk link are filed under. |
| title | String | The package for a dependency, the template name for DAST. |
| installedVersion | String | |
| fixedVersion | String | |
| severity | String | |
| cve | String! | |
| epss | Float | Probability of exploitation in the next 30 days, 0 to 1. |
| epssPercentile | Float | |
| kev | Boolean! | Listed in the CISA Known Exploited Vulnerabilities catalogue. |
| kevDateAdded | String | |
| kevDueDate | String | |
| kevRansomware | Boolean! | |
| triageState | TriageState | |
| triageResponse | TriageResponse |
ExploitedFindingList object
| Nome | Tipo | Descrizione |
|---|---|---|
| items | [ExploitedFinding!]! | |
| total | Int! | |
| kevCount | Int! | |
| epssMin | Float! | |
| kevSyncedAt | DateTime | When each feed was last pulled; null until the first sync. |
| epssSyncedAt | DateTime | |
| epssDate | String |
Exposure object
Findings currently exposed, and how that moved over the period. Deduplicated by match hash within a repository and read from the latest scan per tool, so this is what is open now - not every row ever written.
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| previousTotal | Int! | |
| newFindings | Int! | |
| resolvedFindings | Int! | |
| codeFindings | Int! | |
| dependencyFindings | Int! | |
| corroboratedFindings | Int! | Findings more than one scanner reported - the least likely to be noise. |
| corroborated | [CorroboratedFinding!]! | The findings behind corroboratedFindings, worst first. They come from the same query as the count, so the two cannot disagree - which is why this is here rather than the client deep-linking into the explorer, whose finding list is a different population (every scan, code only, triaged included). Capped, while the count stays exact: a tenant over the cap reads as "some of many" rather than seeing a list that looks complete. |
| falsePositives | Int! | Held back by a decision rather than by a fix. Reported beside the open total, never folded into it - a number that shrinks when somebody dismisses something is what this endpoint exists to avoid. |
| notAffected | Int! | |
| hiddenButScored | Int! | Real findings a decision keeps out of the working list - deferred, or will-not-fix. They still count against the score, so they are named here rather than being quietly absent from both numbers. |
| resolvedFindingsTriaged | Int! | Everything a decision took out of the score entirely. |
FetchGitEntityTask object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| objectId | ID! | |
| status | TaskStatus! | |
| state | FetchGitEntityTaskState! | |
| createdAt | Int! | |
| gitEntity | GitEntity! |
FetchGitEntityTaskState object
| Nome | Tipo | Descrizione |
|---|---|---|
| processed | Int! | |
| total | Int! | |
| error | String | Why the import failed, when status is FAILED; null otherwise. |
FetchRepositoriesInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| gitEntityId | ID! | |
| gitTokenId | ID |
Filter input
| Nome | Tipo | Descrizione |
|---|---|---|
| field | String! | |
| min | Float | |
| max | Float | |
| stringEquals | String | |
| idEquals | ID | |
| categoryEquals | ScanCategory | Equality against a scan category. Typed rather than left to stringEquals so the value is validated and a scanner name cannot be typed into it. |
FindingCorroboration object
One real-world issue and how many independent scanners found it. toolCount > 1 is the "confirmed by N tools" signal.
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| matchHash | String! | |
| toolCount | Int! | |
| severity | Severity | Reconciled across the tools that reported it (highest severity wins). |
FindingCorroborationListResult object
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| items | [FindingCorroboration!]! |
FindingFacetCounts object
The findings explorer rail's counts: how many rows the table would list for each severity and each issue state. Each facet ignores its own filter and honours the others. A value with no rows is absent.
| Nome | Tipo | Descrizione |
|---|---|---|
| severity | [SeverityCount!]! | |
| issueState | [IssueStateCount!]! |
FindingTriage object
A decision taken about a finding. Keyed on the finding's identity rather than its row, so it survives rescans and applies to every scanner that reported the same thing. The three axes are separate on purpose. state decides whether the finding still counts against the security score - only states asserting no live risk take it out. response and a defer priority clear it from the working list while leaving the score alone, because deciding not to act on something does not make it safe.
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| repositoryId | ID! | |
| matchKey | String! | |
| findingType | String! | |
| state | TriageState! | |
| justification | TriageJustification | |
| response | TriageResponse | |
| priority | TriagePriority | |
| reason | String! | |
| createdBy | String | |
| createdAt | DateTime! | |
| expiresAt | DateTime | Required whenever the decision hides a finding that is still exposed. |
FindingTriageEvent object
One entry in a finding's decision history. Append-only.
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| repositoryId | ID! | |
| matchKey | String! | |
| action | String! | set or reopen. |
| state | TriageState | |
| justification | TriageJustification | |
| response | TriageResponse | |
| priority | TriagePriority | |
| reason | String | |
| expiresAt | DateTime | |
| actor | String | |
| createdAt | DateTime! |
GitEntity union
Uno tra: Organization, GitUser
GitEntityListResult object
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| items | [GitEntity!]! |
GitEntityType enum
| Nome | Descrizione |
|---|---|
| organization | |
| user |
GitToken object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| name | String | |
| value | String! | |
| expiresAt | DateTime | |
| flags | [GitTokenFlag!]! | |
| status | GitTokenStatus! | |
| scopes | [String!]! | |
| createdAt | DateTime | |
| updatedAt | DateTime | |
| gitTokenType | GitType! | |
| tenant | String! | |
| gitEntities | GitEntityListResult! |
GitTokenAssociationInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| gitEntityId | ID! | |
| gitTokenId | ID! |
GitTokenCheck object
Result of probing a git token against its provider so the UI can pre-fill the expiry and explain what's wrong when the token is rejected.
| Nome | Tipo | Descrizione |
|---|---|---|
| valid | Boolean! | Whether the provider accepted the token. |
| statusCode | Int | HTTP status the provider returned (e.g. 401 for bad credentials), if any. |
| error | String | Provider error message/code (e.g. "Bad credentials"), if the check failed. |
| expiresAt | DateTime | The token's own expiry as reported by the provider, if it exposes one. |
| publicRepositoryCount | Int | Public repositories the token can see for the given workspace name, or null when no name was supplied, the token is invalid, or the provider couldn't be reached. |
| privateRepositoryCount | Int | Private repositories the token can see for the given workspace name, or null when no name was supplied, the token is invalid, or the provider couldn't be reached. |
| scopes | [String!] | Scopes or permissions the provider reports for the token, or null when it does not expose them. |
GitTokenFlag enum
| Nome | Descrizione |
|---|---|
| default |
GitTokenListResult object
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| items | [GitToken!]! |
GitTokenStatus enum
| Nome | Descrizione |
|---|---|
| valid | |
| invalid | |
| unknown | |
| error |
GitType enum
| Nome | Descrizione |
|---|---|
| github | |
| gitlab | |
| bitbucket | |
| azure_devops | |
| forgejo |
GitUser object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| name | String! | |
| gitType | GitType! | |
| externalId | String | |
| webUrl | String | |
| htmlUrl | String | |
| avatarUrl | String | Presigned URL of the entity's avatar (re-hosted from the provider), null if none. |
| color | String | Representative, always-vivid colour (hex) derived from the avatar or seeded from the name. |
| averageSecurityScore | Float! | |
| lastImportDate | DateTime | |
| repositoryCount | Int | |
| type | GitEntityType! | |
| createdAt | DateTime! | |
| updatedAt | DateTime | |
| ignorePaths | [String!] | |
| tags | [Tag!]! |
HostPorts object
| Nome | Tipo | Descrizione |
|---|---|---|
| host | String! | |
| openPorts | Int! |
HttpHeader object
| Nome | Tipo | Descrizione |
|---|---|---|
| name | String! | |
| value | String! |
HttpHeaderInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| name | String! | |
| value | String! |
Invitation object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| String! | ||
| tenantName | String! |
InviteTeamMemberInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| String! | ||
| language | String |
Invoice object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| invoiceNumber | String | |
| date | DateTime! | |
| dueDate | DateTime! | |
| status | String! | |
| total | Float! | |
| currency | Currency! |
InvoiceDownload object
| Nome | Tipo | Descrizione |
|---|---|---|
| url | String! | |
| filename | String! | |
| tenant | String! | |
| contentType | String! |
InvoiceListResult object
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| items | [Invoice!]! |
IssueStateCount object
| Nome | Tipo | Descrizione |
|---|---|---|
| issueState | String! | open, closed, or none (no issue filed). |
| count | Int! |
IssueStatus enum
Normalized issue state across git providers.
| Nome | Descrizione |
|---|---|
| open | |
| closed |
LinkRiskInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| targetType | RiskLinkTarget! | |
| targetId | ID! | |
| matchKey | String | The finding's matchHash or triage key. Omit to link the whole asset. |
| findingType | String | |
| title | String | |
| severity | String |
MyUser object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| String! | ||
| name | String! | |
| username | String! | |
| tenants | [Tenant!]! | |
| preferences | UserPreferences! |
Network object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| name | String! | |
| network | String! | |
| networkType | NetworkType! | |
| tenant | String! | |
| securityScore | Float! | |
| createdAt | DateTime! | |
| updatedAt | DateTime | |
| requiresConnectorAgent | Boolean! | |
| tags | [Tag!]! | |
| agent | NetworkAgent | |
| posture | NetworkPosture! | What the latest scans found, for the network list. Batched per page. |
NetworkAgent object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| status | NetworkAgentStatus! | |
| lastSeenAt | DateTime | |
| createdAt | DateTime! | |
| routeApproved | Boolean! |
NetworkAgentStatus enum
| Nome | Descrizione |
|---|---|
| PROVISIONED |
NetworkListResult object
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| items | [Network!]! |
NetworkPosture object
A network's latest scan and what its latest successful scan found. A failed or running rescan shows as latestStatus without emptying the counts.
| Nome | Tipo | Descrizione |
|---|---|---|
| latestStatus | ScanStatus | |
| latestScanAt | DateTime | |
| lastSuccessAt | DateTime | |
| schedule | TargetSchedule | |
| openPorts | Int! | |
| portStates | [PortStateCount!]! | |
| hostCount | Int! | Hosts that answered in the latest successful scan. |
| exposedHosts | Int! | Hosts with at least one open port. |
| hosts | [HostPorts!]! | Hosts in address order with their open ports, at most 256; hostCount stays exact. |
NetworkScanFinding object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| scanResultId | ID! | |
| host | String! | |
| hostname | String! | |
| hostnameType | String | |
| protocol | String! | |
| port | Int! | |
| serviceName | String! | |
| state | String! | |
| product | String! | |
| version | String! | |
| extraInfo | String! | |
| reason | String! | |
| confidence | Int! | |
| cpe | String! | |
| tags | [Tag!]! | |
| createdAt | DateTime! | |
| updatedAt | DateTime | |
| networkScanResult | NetworkScanResult! |
NetworkScanFindingListResult object
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| items | [NetworkScanFinding!]! |
NetworkScanResult object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| networkId | ID! | |
| status | ScanStatus! | |
| createdAt | DateTime! | |
| updatedAt | DateTime | |
| scanTime | Int | |
| network | Network! |
NetworkScanResultListResult object
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| items | [NetworkScanResult!]! |
NetworkScanTask object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| objectId | ID! | |
| status | TaskStatus! | |
| state | NetworkScanTaskState! | |
| createdAt | Int! | |
| scanResult | NetworkScanResult! |
NetworkScanTaskState object
| Nome | Tipo | Descrizione |
|---|---|---|
| totalHosts | Int! | |
| processedHosts | Int! | |
| currentHost | String |
NetworkType enum
| Nome | Descrizione |
|---|---|
| public | |
| private | |
| vpn | |
| internal | |
| external | |
| dmz | |
| unknown |
Notification object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| type | NotificationType! | |
| eventType | String! | |
| data | JSON | |
| read | Boolean! | |
| createdAt | DateTime! |
NotificationList object
| Nome | Tipo | Descrizione |
|---|---|---|
| items | [Notification!]! | |
| total | Int! |
NotificationScope object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| channelIds | [String!]! | |
| channelType | ChannelType! | |
| scopes | [String!]! | |
| isActive | Boolean! | |
| status | ChannelStatus! | |
| headers | [HttpHeader!] | Custom HTTP headers sent with webhook deliveries (webhook channel only). |
| template | String | Deprecated: superseded by templates. |
| templates | [NotificationTemplate!] | Per-event message templates (eventType '*' is the default for all events). |
NotificationScopeListResult object
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| items | [NotificationScope!]! |
NotificationTemplate object
A message template for one event type ('*' = every event).
| Nome | Tipo | Descrizione |
|---|---|---|
| eventType | String! | |
| template | String! |
NotificationTemplateInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| eventType | String! | |
| template | String! |
NotificationType enum
| Nome | Descrizione |
|---|---|
| SCAN_FINISHED | |
| REPOSITORY_FETCH_FINISHED |
NSFConsultation input
| Nome | Tipo | Descrizione |
|---|---|---|
| findingId | ID! |
Order enum
| Nome | Descrizione |
|---|---|
| ASC | |
| DESC |
Organization object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| name | String! | |
| gitType | GitType! | |
| externalId | String | |
| webUrl | String | |
| htmlUrl | String | |
| avatarUrl | String | Presigned URL of the entity's avatar (re-hosted from the provider), null if none. |
| color | String | Representative, always-vivid colour (hex) derived from the avatar or seeded from the name. |
| averageSecurityScore | Float! | |
| lastImportDate | DateTime | |
| repositoryCount | Int | |
| type | GitEntityType! | |
| createdAt | DateTime! | |
| updatedAt | DateTime | |
| ignorePaths | [String!] | |
| tags | [Tag!]! |
PaymentMethod object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| default | Boolean! | |
| lastFour | String! | |
| brand | String! | |
| expiryMonth | Int! | |
| expiryYear | Int! | |
| cardholderName | String! | |
| expired | Boolean! |
PaymentMethodListResult object
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| items | [PaymentMethod!]! |
Plan object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| availableGitScanMinutes | Int | |
| availableNetworkScanMinutes | Int | |
| maxRepositories | Int | |
| maxNetworks | Int | |
| maxEmails | Int | |
| pricePerGitScanMinute | Float | |
| pricePerNetworkScanMinute | Float | |
| currency | Currency |
PortStateCount object
| Nome | Tipo | Descrizione |
|---|---|---|
| state | String! | open, filtered, closed or other. |
| count | Int! |
PreferredDateTimeFormat enum
| Nome | Descrizione |
|---|---|
| localized | |
| iso | |
| us | |
| eu |
PreferredRepositoriesView enum
| Nome | Descrizione |
|---|---|
| board | |
| table |
PreferredTheme enum
| Nome | Descrizione |
|---|---|
| Light | |
| Dark | |
| System |
PromoGrant object
A promotion a tenant holds.
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| code | String! | |
| startsAt | DateTime! | |
| endsAt | DateTime! | |
| gitScanMinutes | Int | |
| networkScanMinutes | Int | |
| maxRepositories | Int | |
| maxNetworks | Int | |
| maxEmails | Int |
ProvisionNetworkAgentInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| networkId | ID! |
ProvisionNetworkAgentPayload object
| Nome | Tipo | Descrizione |
|---|---|---|
| agent | NetworkAgent! | |
| preauthKey | String! | |
| heartbeatToken | String! | |
| installCommand | String! |
PrStatus enum
Normalized remediation pull/merge request state.
| Nome | Descrizione |
|---|---|
| open | |
| merged | |
| closed |
PushSubscriptionInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| endpoint | String! | |
| p256dh | String! | |
| auth | String! |
RemediateFindingInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| findingId | ID! |
RemediationFunnel object
Findings to opened issues to merged remediation PRs.
| Nome | Tipo | Descrizione |
|---|---|---|
| findings | Int! | |
| issuesOpened | Int! | |
| issuesClosed | Int! | |
| prsOpened | Int! | |
| prsMerged | Int! |
RemediationTemplate object
| Nome | Tipo | Descrizione |
|---|---|---|
| codeIssueBody | String | |
| dependencyIssueBody | String | |
| pullRequestBody | String |
RemediationTemplateInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| codeIssueBody | String | |
| dependencyIssueBody | String | |
| pullRequestBody | String |
Repository object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| gitEntityId | ID! | |
| repositoryName | String! | |
| private | Boolean | |
| securityScore | Float | |
| programmingLanguage | [String!] | |
| repositorySize | Float | Repository size in bytes. Float, not Int, so large repos (>2GB) don't overflow GraphQL's 32-bit Int. |
| numberOfBranches | Int | |
| cloneUrl | String | |
| createdAt | DateTime! | |
| updatedAt | DateTime | |
| isBlacklisted | Boolean | |
| enabled | Boolean | |
| isStandalone | Boolean | |
| avatarUrl | String | Presigned URL of the repo's own avatar (the project image or custom social preview the git provider exposes, if any); null otherwise - fall back to gitEntity.avatarUrl. |
| color | String | Vivid colour derived from the repo's avatar; null when it has no colourful image - fall back to a hash of the id. |
| ignorePaths | [String!] | |
| tags | [Tag!]! | |
| gitEntity | GitEntity! | |
| severityCounts | [SeverityCount!] | |
| latestScan | RepositoryScan | Most recent scan's status and time (null if never scanned). |
| scoreHistory | [Float!] | Recent security scores oldest→newest, for the list trend sparkline. |
RepositoryCategoryScanDispatch object
What a category scan actually queued. `requested` and `queued` are both here because two of three scanners starting is neither a success nor a failure, and a client told only "accepted" cannot tell the difference. Each scanner keeps its own scan result - they are not collapsed into one, because per-tool reuse, scoring and the corroboration count all depend on them being distinct.
| Nome | Tipo | Descrizione |
|---|---|---|
| category | ScanCategory! | |
| taskId | ID | The first scan queued, so a client that follows a single task still has one. Nullable so that "nothing was queued" is expressible without being an error. |
| scanResultIds | [ID!]! | |
| requested | Int! | How many scanners the category resolved to for this tenant. |
| queued | Int! | |
| skipped | [ScanDispatchSkip!]! |
RepositoryDependencyScanFinding object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| commitScanId | ID! | |
| createdAt | DateTime! | |
| updatedAt | DateTime | |
| severity | Severity | |
| category | ScanCategory | What kind of problem this is - `SCA` for a vulnerable dependency. Null for findings predating the category column. |
| vulnerability | String | |
| dependency | String | |
| installedVersion | String | |
| fixedVersion | String | |
| purl | String | Package URL, e.g. pkg:npm/[email protected]. |
| vulnerabilityAliases | [String!] | Other identifiers for the same advisory (GHSA, vendor ids). |
| matchHash | String | Cross-tool identity: two scanners reporting the same vulnerable package share this value, even when one leads with a CVE and the other a GHSA. |
| issueUrl | String | URL of the issue opened for this dependency on the repository's git provider, if any. |
| issueStatus | IssueStatus | |
| prUrl | String | URL of the remediation PR opened for this dependency, if any. |
| prStatus | PrStatus | |
| commitScan | CommitScan! | |
| tags | [Tag!]! |
RepositoryDependencyScanFindingGroup object
One vulnerable library, aggregating all its advisories (CVEs). Queried with a scanResultId filter it covers that scan; without one it covers the tenant, one row per repository the library is vulnerable in.
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| dependency | String! | |
| repositoryId | ID | Which repository the library is vulnerable in. Null within a single scan result, where the caller already named the repository. |
| repository | Repository | The repository behind repositoryId, so the explorer needs no lookup per row. |
| severity | Severity | |
| installedVersion | String | |
| occurrences | Int! | |
| issueUrl | String | |
| issueStatus | IssueStatus | |
| prUrl | String | |
| prStatus | PrStatus |
RepositoryDependencyScanFindingGroupListResult object
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| items | [RepositoryDependencyScanFindingGroup!]! |
RepositoryDependencyScanFindingListResult object
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| items | [RepositoryDependencyScanFinding!]! |
RepositoryListResult object
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| items | [Repository!]! |
RepositoryRisk object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| name | String! | |
| securityScore | Float! | |
| criticalCount | Int! | |
| highCount | Int! | |
| findingCount | Int! |
RepositoryScan object
| Nome | Tipo | Descrizione |
|---|---|---|
| status | ScanStatus | |
| scannedAt | DateTime |
RepositoryScanTask object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| objectId | ID! | |
| status | TaskStatus! | |
| state | RepositoryScanTaskState! | |
| createdAt | Int! | |
| scanResult | ScanResult! |
RepositoryScanTaskState object
| Nome | Tipo | Descrizione |
|---|---|---|
| totalCommits | Int! | |
| scheduled | Int! | |
| scanned | Int! | |
| failed | Int! | |
| parsed | Int! |
ReviewRiskInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| note | String |
RevolutOrder object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| token | String! |
Risk object
A risk scenario in the tenant's register. Findings are its evidence, not the risk itself.
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| reference | String! | RISK-0001, unique within the tenant. |
| title | String! | |
| scenario | String | |
| category | RiskCategory! | |
| status | RiskStatus! | |
| owner | String | |
| treatment | RiskTreatment | |
| treatmentDescription | String | |
| createdBy | String | |
| inherentLikelihood | Int | |
| inherentImpact | Int | |
| inherentScore | Int | |
| inherentLevel | RiskLevel | |
| residualLikelihood | Int | |
| residualImpact | Int | |
| residualScore | Int | |
| residualLevel | RiskLevel | |
| targetLevel | RiskLevel | |
| acceptedBy | String | |
| acceptedAt | DateTime | |
| acceptanceExpiresAt | DateTime | |
| acceptanceConditions | String | |
| acceptedLevel | RiskLevel | |
| lastReviewedAt | DateTime | |
| nextReviewAt | DateTime | |
| closedAt | DateTime | |
| tags | [String!]! | |
| createdAt | DateTime! | |
| updatedAt | DateTime | |
| linkCount | Int! | |
| openActionCount | Int! | |
| links | [RiskLink!]! | |
| actions | [RiskAction!]! | |
| assessments | [RiskAssessment!]! | |
| history | [RiskEvent!]! | Every change, newest first. Append-only. |
| suggestion | RiskSuggestion! |
RiskAcceptRole enum
| Nome | Descrizione |
|---|---|
| EDITOR | |
| ADMIN |
RiskAction object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| description | String! | |
| owner | String | |
| dueAt | DateTime | |
| status | RiskActionStatus! | |
| issueUrl | String | |
| completedAt | DateTime | |
| createdAt | DateTime! | |
| updatedAt | DateTime |
RiskActionInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| description | String! | |
| owner | String | |
| dueAt | DateTime | |
| status | RiskActionStatus | |
| issueUrl | String |
RiskActionStatus enum
| Nome | Descrizione |
|---|---|
| open | |
| in_progress | |
| done | |
| cancelled |
RiskAssessment object
Append-only. A reassessment adds an entry.
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| kind | RiskAssessmentKind! | |
| likelihood | Int! | |
| impact | Int! | |
| score | Int! | |
| level | RiskLevel! | |
| rationale | String | |
| assessedBy | String | |
| createdAt | DateTime! |
RiskAssessmentKind enum
| Nome | Descrizione |
|---|---|
| inherent | |
| residual | |
| target |
RiskCategory enum
What kind of risk. A register-level grouping, not a scanner category: one risk can rest on findings of several kinds.
| Nome | Descrizione |
|---|---|
| secret_exposure | |
| vulnerable_dependency | |
| code_weakness | |
| web_application | |
| exposed_service | |
| data_protection | |
| misconfiguration | |
| access_control | |
| third_party | |
| other |
RiskEvent object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| action | String! | |
| actor | String | |
| detail | JSON | |
| createdAt | DateTime! |
RiskExport object
The register in the NIST IR 8286A risk register layout.
| Nome | Tipo | Descrizione |
|---|---|---|
| contentType | String! | |
| content | String! |
RiskFilter input
| Nome | Tipo | Descrizione |
|---|---|---|
| status | [RiskStatus!] | |
| level | [RiskLevel!] | |
| treatment | [RiskTreatment!] | |
| category | [RiskCategory!] | |
| owner | String | |
| search | String | |
| reviewOverdue | Boolean |
RiskLevel enum
NIST SP 800-30 five-level band of likelihood x impact.
| Nome | Descrizione |
|---|---|
| very_low | |
| low | |
| moderate | |
| high | |
| very_high |
RiskLevelCount object
| Nome | Tipo | Descrizione |
|---|---|---|
| level | RiskLevel! | |
| count | Int! |
RiskLevelCriteria object
Acceptance criteria for one level (ISO/IEC 27005 clause 7.2).
| Nome | Tipo | Descrizione |
|---|---|---|
| level | RiskLevel! | |
| acceptRole | RiskAcceptRole! | |
| maxDays | Int! | |
| reviewDays | Int! |
RiskLevelCriteriaInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| level | RiskLevel! | |
| acceptRole | RiskAcceptRole! | |
| maxDays | Int! | |
| reviewDays | Int! |
RiskLink object
Evidence or scope. A finding link is keyed like a triage decision, by target and matchKey, so it survives rescans; an asset link has no matchKey.
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| targetType | RiskLinkTarget! | |
| targetId | ID! | |
| matchKey | String | |
| findingType | String | |
| title | String | Snapshot taken when linked. |
| severity | String | |
| createdBy | String | |
| createdAt | DateTime! | |
| triageState | TriageState | The triage decision currently in force for this finding, if any. |
| triageResponse | TriageResponse | |
| triagePriority | TriagePriority | |
| triageExpiresAt | DateTime |
RiskLinkTarget enum
| Nome | Descrizione |
|---|---|
| repository | |
| git_entity | |
| web_target | |
| network |
RiskList object
| Nome | Tipo | Descrizione |
|---|---|---|
| items | [Risk!]! | |
| total | Int! |
RiskMatrixCell object
| Nome | Tipo | Descrizione |
|---|---|---|
| likelihood | Int! | |
| impact | Int! | |
| count | Int! |
RiskSettings object
| Nome | Tipo | Descrizione |
|---|---|---|
| levelCriteria | [RiskLevelCriteria!]! | |
| requireDistinctAcceptor | Boolean! | |
| requireAcceptedRiskForWillNotFix | Boolean! | When true, a will_not_fix triage decision needs an accepted risk linking the finding. |
| autoDraftExploitedRisks | Boolean! | When true (the default), a finding that becomes CISA KEV-listed gets a draft risk. |
| updatedBy | String | |
| updatedAt | DateTime |
RiskSettingsInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| levelCriteria | [RiskLevelCriteriaInput!]! | One entry for every level. |
| requireDistinctAcceptor | Boolean! | |
| requireAcceptedRiskForWillNotFix | Boolean | |
| autoDraftExploitedRisks | Boolean |
RiskStatus enum
Lifecycle of a risk (ISO/IEC 27005). accepted is reached through acceptRisk only.
| Nome | Descrizione |
|---|---|
| identified | |
| analysed | |
| treatment_planned | |
| in_treatment | |
| accepted | |
| monitored | |
| closed |
RiskStatusCount object
| Nome | Tipo | Descrizione |
|---|---|---|
| status | RiskStatus! | |
| count | Int! |
RiskSuggestion object
A starting point for an assessment, derived from the risk's evidence. Nothing is recorded.
| Nome | Tipo | Descrizione |
|---|---|---|
| likelihood | Int! | |
| impact | Int! | |
| score | Int! | |
| level | RiskLevel! | |
| reasons | [String!]! |
RiskSummary object
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| open | Int! | |
| byStatus | [RiskStatusCount!]! | |
| byLevel | [RiskLevelCount!]! | Open risks by residual level, or inherent where not yet treated. |
| inherentMatrix | [RiskMatrixCell!]! | |
| residualMatrix | [RiskMatrixCell!]! | |
| reviewOverdue | Int! | |
| acceptancesExpiring | Int! | Acceptances lapsing within 30 days. |
| actionsOverdue | Int! |
RiskTreatment enum
NIST IR 8286 response type. ISO/IEC 27005 calls them modify, retain, share and avoid.
| Nome | Descrizione |
|---|---|
| mitigate | |
| accept | |
| transfer | |
| avoid |
RSFConsultation input
| Nome | Tipo | Descrizione |
|---|---|---|
| findingId | ID! |
ScanActivityPoint object
| Nome | Tipo | Descrizione |
|---|---|---|
| date | String! | |
| count | Int! | Every repository scan started that day, failed ones included. |
| succeeded | Int! | |
| failed | Int! | Failed and cancelled scans - activity that produced no coverage. |
| networkSucceeded | Int | Network and web target scans that day. The fields above count repository scans only. |
| networkFailed | Int | |
| webSucceeded | Int | |
| webFailed | Int |
ScanCategory enum
What kind of problem a finding is, and what kinds a scanner reports. This is the product vocabulary; a scanner's name is not. Display names are localised per client - the wire value is never shown raw.
| Nome | Descrizione |
|---|---|
| SAST | Static analysis of first-party code. |
| SCA | Dependencies with known vulnerabilities. |
| SECRETS | Credentials and tokens committed to the repository. |
| PII | Personal data in the repository. |
| DAST | A running web application, tested from the outside. |
ScanCoverage object
| Nome | Tipo | Descrizione |
|---|---|---|
| totalRepositories | Int! | |
| scanned | Int! | |
| unscanned | Int! | Repositories never scanned - unknown risk, and excluded from the score. |
ScanDispatchSkip object
One scanner in the category that was not queued. The number skipped is this list's length, so nothing about a partial dispatch is hidden by leaving the identity out.
| Nome | Tipo | Descrizione |
|---|---|---|
| reason | String! |
ScanFinding object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| commitScanId | ID! | |
| createdAt | DateTime! | |
| updatedAt | DateTime | |
| line | Int | |
| file | String | |
| severity | Severity | |
| confidence | String | |
| category | ScanCategory | What kind of problem this is. It comes from the finding, never from the scanner that reported it: a scanner serves more than one category, so it cannot name this row's. Null for findings predating the category column. |
| match | String | Masked (first/last few characters only) - see revealScanFindingMatch for the raw value. |
| fingerprint | String | |
| matchHash | String | Cross-tool identity: two different scanners that found the same secret share this value. Null when the secret could not be resolved (older scans). Distinct from fingerprint, which is per-tool. |
| matchedByToolCount | Int | How many distinct scanners reported this finding. Greater than 1 means two tools independently agreed, which is the strongest cheap signal that it is not a false positive. Null when the finding has no cross-tool identity. |
| issueUrl | String | URL of the issue opened for this finding on the repository's git provider, if any. |
| issueStatus | IssueStatus | |
| prUrl | String | URL of the remediation PR opened for this finding, if any. |
| prStatus | PrStatus | |
| commitScan | CommitScan! | |
| tags | [Tag!]! |
ScanFindingGroup object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| fingerprint | String! | |
| matchHash | String | Cross-tool identity of this group. |
| matchedByToolCount | Int | How many distinct scanners reported this finding. A fingerprint group is one tool's view; this says whether anyone else found the same thing. |
| file | String | |
| severity | Severity | |
| confidence | String | |
| match | String | Masked (first/last few characters only) - see revealScanFindingMatch for the raw value. |
| occurrences | Int! | |
| issueUrl | String | URL of the issue opened for this finding on the repository's git provider, if any. |
| issueStatus | IssueStatus | |
| prUrl | String | URL of the remediation PR opened for this finding, if any. |
| prStatus | PrStatus |
ScanFindingGroupListResult object
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| items | [ScanFindingGroup!]! |
ScanFindingListResult object
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| items | [ScanFinding!]! |
ScanFindingMatchGroup object
One real secret, collapsed across every commit and tool that saw it. The explorer listed raw findings, so a token committed once appeared per commit per tool - 26 commits scanned by 2 tools meant 52 rows for one secret.
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| matchHash | String! | |
| file | String | |
| line | Int | |
| severity | Severity | |
| confidence | String | Highest confidence any contributing tool assigned. |
| match | String | Masked (first/last few characters only) - see revealScanFindingMatch for the raw value. |
| occurrences | Int! | How many raw findings collapsed into this group. |
| toolCount | Int! | How many distinct scanners agreed. Greater than 1 is the corroboration signal. |
| categories | [ScanCategory!]! | Every distinct category the group's rows carry. A list rather than one reconciled value so that disagreement stays visible. |
| repositoryId | ID | |
| repository | Repository | The repository behind repositoryId, so the explorer needs no lookup per row. |
| triageKey | String | The identity a triage decision is filed under - the match hash, or the fingerprint when there is none. Distinct from matchHash above, which falls back to the finding id: filing a decision under that key stored it somewhere nothing ever looks up. |
| triageState | TriageState | The decision in force, carried on the row so the explorer can show and filter it without a call per finding. Null when nothing has been decided. |
| triageResponse | TriageResponse | |
| triagePriority | TriagePriority |
ScanFindingMatchGroupListResult object
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| items | [ScanFindingMatchGroup!]! |
ScanHealth object
| Nome | Tipo | Descrizione |
|---|---|---|
| totalScans | Int! | |
| succeededScans | Int! | |
| failedScans | Int! | |
| runningScans | Int! | |
| invalidTokens | Int! | Tokens the provider rejected; every scan under their workspaces is blocked. |
| expiringTokens | Int! |
ScanResult object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| repositoryId | ID! | |
| scanType | String! | |
| dockerScanToolId | ID! | Which scanner ran, by id. The name is deliberately absent: read the finding's own category, or dockerScanTool.categories. |
| status | ScanStatus! | |
| createdAt | DateTime! | |
| updatedAt | DateTime | |
| scanTime | Int | |
| securityScore | Float | |
| createIssue | Boolean! | |
| autoRemediate | Boolean! | |
| branches | [String!] | |
| repository | Repository! | |
| dockerScanTool | DockerScanTool! | |
| severityCounts | [SeverityCount!]! |
ScanResultListResult object
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| items | [ScanResult!]! |
ScanSchedule object
A standing instruction to run on a fixed cadence. Deliberately a frequency plus an hour rather than a cron expression: the whole space of valid values is enumerable, so it validates here and renders as two selects. Exactly one of repositoryId, gitEntityId, webTargetId or networkId is set, except on a REPORT for the whole tenant, which names none. A workspace SCAN fans out over the repositories the workspace holds when it fires, so one imported after the schedule was made is included and one disabled since is not.
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| action | ScanScheduleAction! | |
| repositoryId | ID | Set when this schedule targets one repository. Null for a workspace schedule. |
| gitEntityId | ID | Set when this schedule targets a whole workspace. Null for a repository schedule. |
| webTargetId | ID | Set when this schedule scans a web target. Always a SCAN for DAST. |
| networkId | ID | Set when this schedule scans a network. Always a SCAN, with no category. |
| branch | String | Branch to scan. Null means the default branch. Never set on a workspace schedule - a branch is a repository-level idea and a workspace's repositories do not share one - nor on a SYNC. |
| category | ScanCategory | What a SCAN looks for. The schedule runs every scanner serving this category that the tenant may run at the moment it fires, so one disabled since the schedule was made is not queued and one added since is. Always null on a SYNC and on a REPORT, which scan nothing, and on a network schedule, whose scan is its own kind. |
| frequency | ScanScheduleFrequency! | |
| hourUtc | Int! | Hour of day in UTC, 0-23. Clients render it in the viewer's own zone. |
| minuteUtc | Int! | Minute of the hour in UTC, 0-59. Zero for a schedule created before minutes existed. |
| dayOfWeek | Int | Day of week, 0-6, Monday is 0. Only read when frequency is WEEKLY. |
| isActive | Boolean! | |
| nextRunAt | DateTime | When the next run is due, in UTC. |
| lastRunAt | DateTime | When the schedule last fired, in UTC. Read only. |
| lastRunOutcome | ScanScheduleRunOutcome | How the last run ended. Null until the schedule first fires. Read only. |
| lastRunReason | String | Why the last run did not dispatch: the error code a manual request gets for the same refusal, such as WEB_TARGET_ADDRESS_REFUSED, NETWORK_AGENT_OFFLINE, NO_SCANNER_FOR_CATEGORY or DAST_SCAN_MINUTES_LIMIT_EXCEEDED. Null when it dispatched. Read only. |
| recipients | [String!]! | Where a REPORT is mailed. Empty for a SCAN or a SYNC. Not restricted to tenant members, matching the destinations alert rules already accept. |
| createdBy | String | |
| createdAt | DateTime | |
| updatedAt | DateTime | |
| repository | Repository | Null for a workspace schedule. |
| gitEntity | GitEntity | Null for a repository schedule. |
| webTarget | WebTarget | Null unless this schedule scans a web target. |
| network | Network | Null unless this schedule scans a network. |
ScanScheduleAction enum
What a due schedule does. SCAN queues a scan; SYNC re-imports a workspace's repositories, the same job the workspace sync button runs. A SYNC only ever targets a workspace: there is nothing to re-import for a single repository.
| Nome | Descrizione |
|---|---|
| SCAN | |
| SYNC | |
| REPORT |
ScanScheduleFrequency enum
| Nome | Descrizione |
|---|---|
| DAILY | |
| WEEKLY |
ScanScheduleListResult object
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| items | [ScanSchedule!]! |
ScanScheduleRunOutcome enum
How a schedule's last run ended. SKIPPED is a refusal by policy (the plan, the address check, nothing to scan) that usually clears on its own; FAILED needs someone to look.
| Nome | Descrizione |
|---|---|
| DISPATCHED | |
| SKIPPED | |
| FAILED |
ScanStatus enum
| Nome | Descrizione |
|---|---|
| PENDING | |
| SUCCESS | |
| FAILED | |
| CANCELLED |
ScoreTrendPoint object
| Nome | Tipo | Descrizione |
|---|---|---|
| date | String! | |
| score | Float! |
ServiceAccount object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| name | String! | |
| isActive | Boolean! | |
| expiresAt | DateTime | |
| createdBy | User! |
SetDastFindingTriageInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| webTargetId | ID! | |
| matchKey | String! | The finding's matchHash. |
| state | TriageState! | |
| justification | TriageJustification | |
| response | TriageResponse | |
| priority | TriagePriority | |
| reason | String! | |
| expiresAt | DateTime |
SetFindingTriageInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| repositoryId | ID! | |
| matchKey | String! | The finding's matchHash, or its per-tool fallback when it has none. |
| findingType | String! | |
| state | TriageState! | |
| justification | TriageJustification | |
| response | TriageResponse | |
| priority | TriagePriority | |
| reason | String! | |
| expiresAt | DateTime |
SetGitEntityIgnorePathsInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| gitEntityId | ID! | |
| ignorePaths | [String!]! |
SetRepositoryEnabledInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| repositoryIds | [ID!]! | |
| enabled | Boolean! |
SetRepositoryIgnorePathsInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| repositoryId | ID! | |
| ignorePaths | [String!]! |
SetServiceAccountActiveInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| isActive | Boolean! |
SetWebTargetCredentialsInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| webTargetId | ID! | |
| kind | WebTargetSignInKind! | |
| label | String | |
| secret | String! |
Severity enum
| Nome | Descrizione |
|---|---|
| info | |
| low | |
| medium | |
| high | |
| critical |
SeverityCount object
| Nome | Tipo | Descrizione |
|---|---|---|
| severity | String! | |
| count | Int! |
StaleWorkspace object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| name | String! | |
| lastImportDate | DateTime |
StartNetworkScanInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| networkId | ID! |
StartRepositoryCategoryScanInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| repositoryId | ID! | |
| category | ScanCategory! | What to look for. Every scanner in it that this tenant may run is queued. |
| branch | String | |
| gitTokenId | ID | |
| createIssue | Boolean | |
| autoRemediate | Boolean |
StartRepositoryScanInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| repositoryId | ID! | |
| dockerScanToolId | ID! | |
| branch | String | |
| gitTokenId | ID | |
| createIssue | Boolean | |
| autoRemediate | Boolean |
StartWebScanInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| webTargetId | ID! |
Tag object
| Nome | Tipo | Descrizione |
|---|---|---|
| key | String! | |
| value | String! |
TargetSchedule object
An active schedule, in UTC.
| Nome | Tipo | Descrizione |
|---|---|---|
| frequency | ScanScheduleFrequency! | |
| hourUtc | Int! | |
| minuteUtc | Int! | |
| dayOfWeek | Int | 0 is Monday; set for a weekly schedule. |
Task union
Uno tra: RepositoryScanTask, NetworkScanTask, WebScanTask, FetchGitEntityTask
TaskEvent object
| Nome | Tipo | Descrizione |
|---|---|---|
| type | TaskEventType! | |
| taskId | ID! | |
| task | Task |
TaskEventType enum
| Nome | Descrizione |
|---|---|
| STATE_UPDATED | |
| TASK_CANCELLED |
TaskStatus enum
| Nome | Descrizione |
|---|---|
| QUEUED | |
| STARTED | |
| CANCELLED | |
| PROCESSING | |
| COMPLETED | |
| FAILED |
Tenant object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| isPaying | Boolean! | |
| members | [TenantUser!]! |
TenantPosture object
The two analytics figures the repository and network list screens show, without the rest of the dashboard payload.
| Nome | Tipo | Descrizione |
|---|---|---|
| averageSecurityScore | Float! | |
| severityCounts | [SeverityCount!]! | Open findings per severity, worst first. |
TenantStatistics object
| Nome | Tipo | Descrizione |
|---|---|---|
| tenant | String! | |
| totalUsers | Int! | |
| totalGitEntities | Int! | |
| totalRepositories | Int! | |
| totalNetworks | Int! |
TenantUser object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| roles | [TenantUserRole!]! | |
| aiAccess | AiAccessLevel! | |
| user | User! |
TenantUserRole enum
| Nome | Descrizione |
|---|---|
| VIEWER | |
| EDITOR | |
| ADMIN |
TermsAcceptanceStatus object
Where the caller stands against the current Platform Terms.
| Nome | Tipo | Descrizione |
|---|---|---|
| currentVersion | String! | YYYY-MM-DD, the effective date of the current version. |
| currentUrl | String! | |
| acceptedVersion | String | The version the caller last accepted. |
| acceptedBy | String | The caller's email, as recorded when they accepted. |
| acceptedAt | String | |
| isCurrent | Boolean! |
TransferGitEntityInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| gitEntityId | ID! | |
| newTenant | String! |
TransferNetworkInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| networkId | ID! | |
| newTenant | String! |
TriageException object
A triage decision in force that keeps a still-exposed finding out of the working list: will_not_fix or another response, or a defer.
| Nome | Tipo | Descrizione |
|---|---|---|
| targetType | RiskLinkTarget! | |
| targetId | ID! | |
| targetName | String | |
| matchKey | String! | |
| findingType | String | |
| state | TriageState! | |
| justification | TriageJustification | |
| response | TriageResponse | |
| priority | TriagePriority | |
| reason | String! | |
| createdBy | String | |
| createdAt | DateTime! | |
| expiresAt | DateTime |
TriageJustification enum
CycloneDX VEX justification. Required when the state is not_affected.
| Nome | Descrizione |
|---|---|
| code_not_present | |
| code_not_reachable | |
| requires_configuration | |
| requires_dependency | |
| requires_environment | |
| protected_by_compiler | |
| protected_at_runtime | |
| protected_at_perimeter | |
| protected_by_mitigating_control |
TriagePriority enum
SSVC decision outcome. Only defer hides the finding from the working list.
| Nome | Descrizione |
|---|---|
| defer | |
| scheduled | |
| out_of_cycle | |
| immediate |
TriageResponse enum
CycloneDX VEX analysis.response - what will be done about it.
| Nome | Descrizione |
|---|---|
| can_not_fix | |
| rollback | |
| update | |
| will_not_fix | |
| workaround_available |
TriageState enum
CycloneDX VEX analysis.state - what is true about the finding.
| Nome | Descrizione |
|---|---|
| resolved | |
| resolved_with_pedigree | |
| exploitable | |
| in_triage | |
| false_positive | |
| not_affected |
UpdateGitEntityInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| gitEntityId | ID! | |
| name | String | |
| gitType | GitType | |
| ignorePaths | [String!] |
UpdateGitTokenInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| name | String | |
| value | String |
UpdateNotificationScopeInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| channelIds | [String!] | |
| channelType | ChannelType | |
| scopes | [String!] | |
| isActive | Boolean | |
| headers | [HttpHeaderInput!] | |
| templates | [NotificationTemplateInput!] |
UpdateRiskActionInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| description | String | |
| owner | String | |
| dueAt | DateTime | |
| status | RiskActionStatus | |
| issueUrl | String |
UpdateRiskInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| title | String | |
| scenario | String | |
| category | RiskCategory | |
| owner | String | |
| treatment | RiskTreatment | |
| treatmentDescription | String | |
| status | RiskStatus | accepted is refused; use acceptRisk. |
| tags | [String!] |
UpdateScanScheduleInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| branch | String | |
| category | ScanCategory | Omit to leave the category alone. |
| frequency | ScanScheduleFrequency | |
| hourUtc | Int | |
| minuteUtc | Int | |
| dayOfWeek | Int | |
| isActive | Boolean | |
| recipients | [String!] |
UpdateUserAiAccessInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| userId | ID! | |
| aiAccess | AiAccessLevel! |
UpdateUserPreferencesInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| theme | PreferredTheme | |
| dateTimeFormat | PreferredDateTimeFormat | |
| repositoriesView | PreferredRepositoriesView |
UpdateUserRolesInput input
| Nome | Tipo | Descrizione |
|---|---|---|
| userId | ID! | |
| roles | [TenantUserRole!]! |
Usage object
| Nome | Tipo | Descrizione |
|---|---|---|
| accountTier | String! | |
| usedGitScanTimeMinutes | Int! | |
| repositoryScanLimited | Boolean! | |
| usedNetworkScanTimeMinutes | Int! | |
| networkScanLimited | Boolean! | |
| usedDastScanTimeMinutes | Int! | |
| dastScanLimited | Boolean! | |
| parallelScans | Int! | |
| availableGitScanMinutes | Int! | |
| availableNetworkScanMinutes | Int! | |
| availableDastScanMinutes | Int! | |
| maxParallelScans | Int! | |
| usedRepositories | Int! | |
| maxRepositories | Int! | |
| repositoryLimitReached | Boolean! | |
| usedNetworks | Int! | |
| maxNetworks | Int! | |
| networkLimitReached | Boolean! | |
| usedWebTargets | Int! | |
| maxWebTargets | Int! | |
| webTargetLimitReached | Boolean! | |
| usedEmails | Int! | |
| maxEmails | Int! | |
| emailLimitReached | Boolean! |
User object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| String | Null unless the caller may read it: their own address, or any address in a tenant they hold EDITOR or ADMIN in. Nullable rather than guarded by @tenantRole because the directive throws, and a thrown error on a non-null field takes the whole myUser query down for every VIEWER instead of hiding one field. | |
| username | String! | |
| name | String! |
UserPreferences object
| Nome | Tipo | Descrizione |
|---|---|---|
| theme | PreferredTheme | |
| dateTimeFormat | PreferredDateTimeFormat | |
| repositoriesView | PreferredRepositoriesView |
WebScanResult object
One dynamic scan of one web target. Filter the list on webTargetId or status. Deliberately carries no scanner name or image: which scanner ran is not part of the product surface.
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| webTargetId | ID! | |
| status | ScanStatus! | |
| securityScore | Float | |
| scanTime | Int | Seconds the scan ran; what the plan's DAST minutes are charged from. |
| pinnedAddresses | [String!] | The addresses the scan was pinned to when it was started. The host may resolve elsewhere later; these are the addresses requests were sent to. |
| createdAt | DateTime! | |
| updatedAt | DateTime | |
| webTarget | WebTarget |
WebScanResultListResult object
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| items | [WebScanResult!]! |
WebScanTask object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| objectId | ID! | |
| status | TaskStatus! | |
| state | WebScanTaskState! | |
| createdAt | Int! | |
| webScanResult | WebScanResult! |
WebScanTaskState object
A web scan's progress, in the network scan's host counters.
| Nome | Tipo | Descrizione |
|---|---|---|
| totalHosts | Int! | |
| processedHosts | Int! | |
| currentHost | String |
WebTarget object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| name | String! | |
| baseUrl | String! | |
| scheme | String! | |
| host | String! | |
| port | Int! | |
| scopePaths | [String!]! | |
| excludedPaths | [String!]! | |
| tenant | String! | |
| createdAt | DateTime! | |
| updatedAt | DateTime | |
| signIn | WebTargetSignIn! | |
| posture | WebTargetPosture! | What the latest scans found, for the web target list. Batched per page. |
WebTargetListResult object
| Nome | Tipo | Descrizione |
|---|---|---|
| total | Int! | |
| items | [WebTarget!]! |
WebTargetPosture object
A web target's latest scan and what its latest successful scan found. A failed or running rescan shows as latestStatus without emptying the counts.
| Nome | Tipo | Descrizione |
|---|---|---|
| latestStatus | ScanStatus | |
| latestScanAt | DateTime | |
| lastSuccessAt | DateTime | |
| schedule | TargetSchedule | |
| severityCounts | [SeverityCount!]! | Open findings per severity, worst first. |
| openFindings | Int! | |
| deferred | Int! | |
| dismissed | Int! |
WebTargetSignIn object
| Nome | Tipo | Descrizione |
|---|---|---|
| configured | Boolean! | |
| kind | WebTargetSignInKind | |
| label | String | |
| updatedAt | DateTime | |
| methods | [WebTargetSignInMethod!]! | Never carries a secret. |
WebTargetSignInKind enum
| Nome | Descrizione |
|---|---|
| HEADER | |
| BEARER | |
| COOKIE | |
| BASIC |
WebTargetSignInMethod object
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| kind | WebTargetSignInKind! | |
| label | String | |
| updatedAt | DateTime |
WorkspaceOverview object
Security aggregate for one workspace, counted on the server with the same latest-scan + deduplicated policy as the dashboard.
| Nome | Tipo | Descrizione |
|---|---|---|
| severityCounts | [SeverityCount!]! | |
| totalFindings | Int! | |
| totalRepositories | Int! | |
| scanned | Int! | |
| unscanned | Int! |