Retrieve applications that match the given label exactly. NOTE: Case-sensitive.

Retrieve applications having a label that contains or matches what is given (case-insensitive).

Can be one or more comma-separated client IDs.

Retrieve applications based on their status: 'not_configured' (not yet configured), 'site_disabled' (administratively disabled), 'verify_in_progress' (has VVSCA open), 'need_scan_schedule' (no scan schedule), 'config_in_progress' (job is suspended for some reason), 'scan_running' (has a scan running), 'active' (none of the above, idle).

Retrieve applications based on whether or not they have a schedule.

Retrieve applications having a scan schedule name that contains or matches what is given (case-insensitive).

Retrieve applications having a scan schedule timezone that contains or matches what is given (case-insensitive). EXAMPLE: America/New_York

Retrieve applications having a Custom Asset ID that contains or matches what is given (case-insensitive).

Retrieve applications having an Asset Owner that contains or matches the given username (case-insensitive).

Retrieve applications for clients who only use our Source Code Analysis (SCA/SAST) service, but not our DAST service.

Display all available information for each application.

Display the customer's organization and the groups each application belongs to.

Display the number of open vulnerabilities for each application.

Display each application's scan schedule information.

Display a list of tags for each application.

Display the custom asset ID for each application.

Display the asset owner name for each application.

Display the total number of lines of source code under contract for each application, how many lines of code have been used, and averages (lines of code scanned, file size) calculated over the most recent 20 scans.

Display scan configuration details (scan profile, directories to exclude from scans, etc.) for each application. Returns a stringified JSON structure.

Display the filename and other information about the XML file (optionally uploaded by the customer) that is used to resolve dependencies, if it exists.

Display what phase each application is in ('pre-production', 'production', or 'discontinued').

Display each application's scan statistics. Results may include file counts by extension, lines of code scanned, a count of vulns found during the scan, and other scan-related information.

Display the total number of applications and the number actually returned to the requester based on query parameters given.

This is a CSV-Only parameter. Displays different CSV information based on the options given.

Display Pre-scan, Full-scan status and details.

Display Application vuln policy information.

Order the results.

Data format for results.

Generated from available response content types