Findings REST API
The Findings API enables you to access information about open and mitigated findings associated with applications and development sandboxes.
This API supports Static Analysis, Dynamic Analysis, Manual Penetration Testing, and Software Composition Analysis findings.
note
You cannot get SCA findings in combination with other finding types.
The Findings API simplifies common reporting scenarios, such as obtaining the latest data for each application and accessing historical state-change information on findings.
Permissions
Before you can use all endpoints of this API, you must have one of the following accounts with the required roles:
- An API user account with the Results API role.
- A UI user account with the Reviewer or Security Lead role.
Authentication
This API requires secure authentication to Veracode.
Findings API specification
The Findings API specification is available from SwaggerHub.