Skip to main content
GET
Get SCA Issues

Authorizations

CORGEA-TOKEN
string
header
required

API key for authentication

Query Parameters

project
string

Filter SCA issues by project name

repo
string

Filter SCA issues by repository URL

branch
string

Filter SCA issues by branch name

page
integer
default:1

The page number for pagination

page_size
integer
default:20

The number of results per page

Required range: x <= 50
severity
string

Filter by severity levels (comma-separated). Valid values: CRITICAL, HIGH, MEDIUM, LOW

package
string

Filter by package name (partial match)

ecosystem
string

Filter by package ecosystem (case-insensitive)

cve
string

Filter by CVE identifier (partial match)

path
string

Filter by file path (partial match)

has_fix
boolean

Filter by whether a fix is available (true/false)

reachability
enum<string>

Filter SCA issues by dependency reachability status

Available options:
not_direct_dependency,
pending,
vulnerable_usage_reachable,
vulnerable_usage_unreachable,
dead_dependency
include_reachability
boolean
default:false

Include dependency reachability status and description for each SCA issue.

sort_by
enum<string>

Sort results by field (prefix with '-' for descending order)

Available options:
created_at,
-created_at,
severity,
-severity,
package,
-package,
ecosystem,
-ecosystem
status
string

Filter by triage status (comma-separated). Valid values: open, fixed, false_positive, accepted_risk, duplicate

package_exact
string

Filter by an exact package name. Unlike package, this does not match packages that merely contain the value (lodash will not match lodash.merge), which makes it safe for drilling into a package group.

Free-text search across package name, CVE identifier, summary, details, path and classification

Response

SCA issues retrieved successfully or no project found

status
string
Example:

"ok"

page
integer
total_pages
integer
total_issues
integer
issues
object[]