Introducing Extended APIs: Enhanced Security Management for Developers

We're excited to announce the launch of Extended APIs, a comprehensive set of new endpoints that give developers powerful programmatic access to Corgea's security platform. These APIs enable deeper integration, automation, and control over your security workflows.

What's New

Scans API

Complete scan management with advanced filtering and pagination. The Scans API lets you programmatically retrieve scan history, monitor scan status, and generate detailed reports. With project-based filtering and pagination support, you can efficiently manage large-scale security scanning operations across multiple projects and repositories.

Key Benefits: Automate scan monitoring, integrate security status into dashboards, and maintain comprehensive audit trails of all security assessments.

Issues API

Comprehensive vulnerability management with granular filtering capabilities. The Issues API provides access to all security findings with powerful filtering by urgency, status, language, file path, classification, and SLA status. You can retrieve both traditional security issues and Software Composition Analysis (SCA) vulnerabilities through dedicated endpoints.

Key Benefits: Build custom vulnerability dashboards, automate issue triage workflows, and create targeted remediation campaigns based on specific criteria.

Blocking Rules API

Policy management and enforcement for automated security governance. The Blocking Rules API allows you to retrieve and validate security policies programmatically, ensuring compliance before deployments. You can check if scans violate any blocking rules and get detailed information about policy violations.

Key Benefits: Enforce security policies in CI/CD pipelines, prevent deployments with critical vulnerabilities, and maintain consistent security standards across all projects.

Scan Operations API

Direct scan operations and management for automated security workflows. The Scan Operations API enables you to initiate scans, monitor progress, and generate reports programmatically. Support for chunked file uploads allows scanning of large codebases efficiently.

Key Benefits: Integrate security scanning into your development workflow, automate scan initiation based on code changes, and generate reports for compliance and auditing purposes.

New API Playground

Teams can now experiment and test Corgea's API's through the new API playground. This is a great way to iterate and get a working version using the different script generators.

Overall Benefits

Complete Automation: Transform manual security processes into automated workflows that integrate seamlessly with your existing development tools and CI/CD pipelines.

Enhanced Visibility: Gain comprehensive insights into your security posture with detailed filtering, reporting, and monitoring capabilities across all projects and repositories.

Policy Enforcement: Ensure consistent security standards with programmatic policy management and automated compliance checking.

Developer Productivity: Reduce security overhead by providing developers with direct API access to security data, enabling them to build custom tools and integrations.

Scalable Security: Handle enterprise-scale security operations with efficient pagination, filtering, and batch processing capabilities.

Quick Start

# List all scans
curl -H "CORGEA-TOKEN: your_token" \
     "https://www.corgea.app/api/v1/scans"

# Get issues with filtering
curl -H "CORGEA-TOKEN: your_token" \
     "https://www.corgea.app/api/v1/issues?urgency=CR,HI&status=open"

# Check blocking rules
curl -H "CORGEA-TOKEN: your_token" \
     "https://www.corgea.app/api/v1/blocking-rules"

Authentication

All endpoints use header-based authentication with your API token:

Response Format

All responses follow a consistent JSON structure:

{
  "status": "ok",
  "page": 1,
  "total_pages": 5,
  "data": []
}

Get Started

1. Get your API token from your Corgea account settings

2. Verify your token using the /verify endpoint

3. Explore the new endpoints in our API Reference

The Extended APIs are now live and ready for integration. Start building more secure applications with programmatic access to Corgea's security platform.