Skip to main content

Findings REST API

The Findings API enables you to access information about open and mitigated findings associated with applications and development sandboxes.

This API supports Static Analysis, Dynamic Analysis, Manual Penetration Testing, and Software Composition Analysis findings.

note

You cannot get SCA findings in combination with other finding types.

The Findings API simplifies common reporting scenarios, such as obtaining the latest data for each application and accessing historical state-change information on findings.

Permissions

Before you can use all endpoints of this API, you must have one of the following accounts with the required roles:

  • An API user account with the Results API role.
  • A UI user account with the Reviewer or Security Lead role.

Authentication

This API requires secure authentication to Veracode.

Findings API specification

The Findings API specification is available from SwaggerHub.