This quick reference lists the Application Security API endpoints used in our dedicated workflow guides, such as the Unified Application Security Policy API workflow. It connects the practical steps in those guides with the underlying API specifications.
For complete schemas, available filtering parameters, payload examples, and specific implementation details for all API endpoints Cortex Cloud Platform APIs documentation.
Data source integrations
Description | Endpoint |
|---|---|
Create a new AppSec data source integration VCS CI CD third party scanner or a 3rd Party AppSec Collector |
|
Retrieve a list of data source integrations or collectors |
|
Retrieve details of a specific data source integration or collector |
|
Update an existing data source integration or collector configuration |
|
Delete a data source integration or collector and its associated repository mappings |
|
Upload SAST findings SARIF files to a 3rd Party Collector |
|
Unified Application Security policies
Description | Endpoint |
|---|---|
Create a new policy define conditions target scopes and triggers |
|
Retrieve a list of all Unified Application Security Policies |
|
Retrieve full configuration details of a specific policy by ID |
|
Update an existing policys configuration |
|
Delete a policy from your environment |
|
Application criteria
Description | Endpoint |
|---|---|
Create new application grouping criteria Code or Cloud type |
|
Retrieve a list of all application criteria |
|
Retrieve specific application criteria by ID |
|
Delete application criteria by ID |
|
Repositories and scan configurations
Description | Endpoint |
|---|---|
Retrieve a list of repository assets |
|
Retrieve a specific repository asset by ID |
|
Retrieve the scan configuration for a repository |
|
Update the scan configuration scanners PR scanning excluded paths etc |
|
Retrieve configured branches for scanning |
|
Update the primary and selected branches for scanning |
|
Business applications
Description | Endpoint |
|---|---|
Create a new business application with a name criticality and ownership metadata |
|
Retrieve a list of all applications with pagination |
|
Retrieve a specific application by its unique identifier |
|
Update application metadata description owners compliance etc |
|
Delete an application |
|
Retrieve application configuration settings for the tenant |
|
Retrieve an issue summary breakdown by severity for a specific application |
|
Retrieve application insights by category and item type |
|
Scans, issues, and findings
Description | Endpoint |
|---|---|
Retrieve a list of branch periodic scans |
|
Retrieve a list of pull request PR scans |
|
Retrieve a list of CI scans |
|
Retrieve unscanned Application Security repositories |
|
Retrieve individual issue records found during a specific scan |
|
Retrieve raw scanner findings for a specific scan |
|
Trigger a rerun of a repository scan |
|