Reference

REST API

Programmatic access to findings, sources and repairs.

The REST API is served by the console at /api/v1. Authenticate with a workspace token sent as a bearer token.

bash

curl https://opsec.internal/api/v1/findings?status=open \
  -H "Authorization: Bearer $OPSEC_TOKEN"

json

{
  "id": "TSR-2342",
  "title": "Missing ownership check on invoice download",
  "exploitability": 8.6,
  "status": "open",
  "repair": { "pull_request": "https://github.com/acme/billing-api/pull/412" }
}