Using the Dynamic Flaw Information Endpoint

You can use the dynamic_flaw_info endpoint of the Findings API to get additional information on a single flaw discovered during a Dynamic Analysis.

Permissions and Authentication

Before you can use all the endpoints of the Findings API, you must have one of these account types:

• An API service account with the Results API role
• A user account with the Reviewer or Security Lead role

This API uses API ID/key credentials and HMAC authentication to provide improved security. Before you can send requests, you must complete these configurations:

• Veracode API credentials
• HMAC authentication

Ensure you access the APIs with the domain for your region.

Dynamic Flaw API Specification

The dynamic_flaw_info endpoint uses the Dynamic Flaw API specification available from SwaggerHub.