Fortify Software Applications API

swagger: '2.0'
info:
  version: v3
  title: OpenText™ Core Application Security Web API Explorer ApiKeyManagement Applications API
host: api.ams.fortify.com
schemes:
- https
tags:
- name: Applications
paths:
  /api/v3/applications/{applicationId}:
    get:
      tags:
      - Applications
      summary: Retrieves an individual application by id
      description: 'Allowed Scopes: api-tenant, view-apps'
      operationId: ApplicationsV3_GetApplication
      consumes: []
      produces:
      - application/json
      - text/json
      - application/xml
      - text/xml
      parameters:
      - name: applicationId
        in: path
        description: The application id
        required: true
        type: integer
        format: int32
      responses:
        '200':
          description: Ok
          schema:
            $ref: '#/definitions/Application'
        '401':
          description: Unauthorized
        '404':
          description: NotFound
        '429':
          description: TooManyRequests
        '500':
          description: InternalServerError
    put:
      tags:
      - Applications
      summary: Update an application
      description: 'Allowed Scopes: api-tenant, manage-apps'
      operationId: ApplicationsV3_PutApplication
      consumes:
      - application/json
      - text/json
      - application/xml
      - text/xml
      - application/x-www-form-urlencoded
      - multipart/form-data
      produces:
      - application/json
      - text/json
      - application/xml
      - text/xml
      parameters:
      - name: applicationId
        in: path
        description: The application id
        required: true
        type: integer
        format: int32
      - name: requestModel
        in: body
        description: The application data
        required: true
        schema:
          $ref: '#/definitions/PutApplicationRequest'
      responses:
        '200':
          description: Ok
          schema:
            $ref: '#/definitions/PutApplicationResponse'
        '400':
          description: BadRequest
          schema:
            $ref: '#/definitions/PutApplicationResponse'
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: NotFound
        '422':
          description: UnprocessableEntity
          schema:
            $ref: '#/definitions/PutApplicationResponse'
        '429':
          description: TooManyRequests
        '500':
          description: InternalServerError
    delete:
      tags:
      - Applications
      summary: Deletes an application
      description: 'Allowed Scopes: api-tenant, manage-apps'
      operationId: ApplicationsV3_Delete
      consumes: []
      produces:
      - application/json
      - text/json
      - application/xml
      - text/xml
      parameters:
      - name: applicationId
        in: path
        description: The application id
        required: true
        type: integer
        format: int32
      responses:
        '200':
          description: Ok
          schema:
            $ref: '#/definitions/DeleteApplicationResponse'
        '400':
          description: BadRequest
          schema:
            $ref: '#/definitions/DeleteApplicationResponse'
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: NotFound
        '429':
          description: TooManyRequests
        '500':
          description: InternalServerError
  /api/v3/applications:
    get:
      tags:
      - Applications
      summary: Retrieve a collection of applications
      description: 'Allowed Scopes: api-tenant, view-apps'
      operationId: ApplicationsV3_GetApplications
      consumes: []
      produces:
      - application/json
      - text/json
      - application/xml
      - text/xml
      parameters:
      - name: filters
        in: query
        description: "A delimited list of field filters.\r\n<br /><br />Field name and value should be separated by a colon (:).\r\n<br /><br />Multiple fields should be separated by a plus (+). Multiple fields are treated as an AND condition. Example, fieldname1:value+fieldname2:value\r\n<br /><br />Multiple values for a field should be separated by a pipe (|). Mulitple values for a field are treated as an OR condition. Example, fieldname1:value1|value2\r\n<br /><br />Filtering is not supported for the following fields: applicationDescription, attributes"
        required: false
        type: string
      - name: orderBy
        in: query
        description: The field name to order the results by.
        required: false
        type: string
      - name: orderByDirection
        in: query
        description: The direction to order the results by. ASC and DESC are valid values.
        required: false
        type: string
      - name: fields
        in: query
        description: Comma separated list of fields to return.
        required: false
        type: string
      - name: offset
        in: query
        description: Offset of the starting record. 0 indicates the first record.
        required: false
        type: integer
        format: int32
      - name: limit
        in: query
        description: Maximum records to return. The maximum value allowed is 50.
        required: false
        type: integer
        format: int32
      - name: modifiedStartDate
        in: query
        description: The modified on or after date.
        required: false
        type: string
        format: date-time
      responses:
        '200':
          description: Ok
          schema:
            $ref: '#/definitions/ApplicationListResponse'
        '400':
          description: BadRequest
          schema:
            $ref: '#/definitions/ErrorResponse'
        '401':
          description: Unauthorized
        '429':
          description: TooManyRequests
        '500':
          description: InternalServerError
    post:
      tags:
      - Applications
      summary: Create a new application and release
      description: 'Allowed Scopes: api-tenant, manage-apps'
      operationId: ApplicationsV3_PostApplication
      consumes:
      - application/json
      - text/json
      - application/xml
      - text/xml
      - application/x-www-form-urlencoded
      - multipart/form-data
      produces:
      - application/json
      - text/json
      - application/xml
      - text/xml
      parameters:
      - name: requestModel
        in: body
        description: The application data
        required: true
        schema:
          $ref: '#/definitions/PostApplicationRequest'
      responses:
        '201':
          description: Created
          schema:
            $ref: '#/definitions/PostApplicationResponse'
        '400':
          description: BadRequest
          schema:
            $ref: '#/definitions/ErrorResponse'
        '401':
          description: Unauthorized
        '422':
          description: UnprocessableEntity
          schema:
            $ref: '#/definitions/ErrorResponse'
        '429':
          description: TooManyRequests
        '500':
          description: InternalServerError
  /api/v3/applications/{applicationId}/auto-report:
    get:
      tags:
      - Applications
      summary: Returns the associated auto-run report type for the application.
      description: 'Allowed Scopes: api-tenant, view-apps'
      operationId: ApplicationsV3_GetAutoReport
      consumes: []
      produces:
      - application/json
      - text/json
      - application/xml
      - text/xml
      parameters:
      - name: applicationId
        in: path
        description: The application id
        required: true
        type: integer
        format: int32
      responses:
        '200':
          description: Ok
          schema:
            $ref: '#/definitions/GetAutoReportResponse'
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: NotFound
        '429':
          description: TooManyRequests
        '500':
          description: InternalServerError
    post:
      tags:
      - Applications
      summary: Set-up the associated auto-run report for the application
      description: 'Allowed Scopes: api-tenant, manage-apps'
      operationId: ApplicationsV3_PostAutoReport
      consumes:
      - application/json
      - text/json
      - application/xml
      - text/xml
      - application/x-www-form-urlencoded
      - multipart/form-data
      produces:
      - application/json
      - text/json
      - application/xml
      - text/xml
      parameters:
      - name: applicationId
        in: path
        description: The application id
        required: true
        type: integer
        format: int32
      - name: requestModel
        in: body
        description: The auto report data
        required: true
        schema:
          $ref: '#/definitions/PostAutoReportRequest'
      responses:
        '200':
          description: Ok
          schema:
            $ref: '#/definitions/PostAutoReportResponse'
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: NotFound
        '422':
          description: UnprocessableEntity
          schema:
            $ref: '#/definitions/PostAutoReportResponse'
        '429':
          description: TooManyRequests
        '500':
          description: InternalServerError
  /api/v3/applications/{applicationId}/users:
    get:
      tags:
      - Applications
      summary: Returns a list of users that have access to the application
      description: 'Allowed Scopes: api-tenant, view-apps'
      operationId: ApplicationsV3_GetApplicationUsers
      consumes: []
      produces:
      - application/json
      - text/json
      - application/xml
      - text/xml
      parameters:
      - name: applicationId
        in: path
        description: The application id
        required: true
        type: integer
        format: int32
      responses:
        '200':
          description: Ok
          schema:
            $ref: '#/definitions/GetApplicationUsersResponse'
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: NotFound
        '429':
          description: TooManyRequests
        '500':
          description: InternalServerError
  /api/v3/applications/{applicationId}/user-groups:
    get:
      tags:
      - Applications
      summary: Returns a list of user groups that have access to the application
      description: 'Allowed Scopes: api-tenant, view-apps'
      operationId: ApplicationsV3_GetApplicationUserGroups
      consumes: []
      produces:
      - application/json
      - text/json
      - application/xml
      - text/xml
      parameters:
      - name: applicationId
        in: path
        description: The application id
        required: true
        type: integer
        format: int32
      responses:
        '200':
          description: Ok
          schema:
            $ref: '#/definitions/GetApplicationUserGroupsResponse'
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: NotFound
        '429':
          description: TooManyRequests
        '500':
          description: InternalServerError
  /api/v3/applications/owners:
    get:
      tags:
      - Applications
      summary: Returns a list of users that can be set as an application owner
      description: 'Allowed Scopes: api-tenant, view-apps'
      operationId: ApplicationsV3_GetApplicationOwners
      consumes: []
      produces:
      - application/json
      - text/json
      - application/xml
      - text/xml
      responses:
        '200':
          description: Ok
          schema:
            $ref: '#/definitions/ApplicationUserListResponse'
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '429':
          description: TooManyRequests
        '500':
          description: InternalServerError
  /api/v3/applications/{applicationId}/user-permissions:
    get:
      tags:
      - Applications
      summary: Returns the permissions the current user has for the application
      description: 'Allowed Scopes: api-tenant, view-apps'
      operationId: ApplicationsV3_GetApplicationUserPermissions
      consumes: []
      produces:
      - application/json
      - text/json
      - application/xml
      - text/xml
      parameters:
      - name: applicationId
        in: path
        description: The application id
        required: true
        type: integer
        format: int32
      responses:
        '200':
          description: Ok
          schema:
            $ref: '#/definitions/ApplicationUserPermissions'
        '401':
          description: Unauthorized
        '404':
          description: NotFound
        '429':
          description: TooManyRequests
        '500':
          description: InternalServerError
  /api/v3/applications/{applicationId}/releases:
    get:
      tags:
      - Applications
      summary: Returns a list of releases for the given application
      description: 'Allowed Scopes: api-tenant, view-apps'
      operationId: ApplicationsV3_GetApplicationReleases
      consumes: []
      produces:
      - application/json
      - text/json
      - application/xml
      - text/xml
      parameters:
      - name: applicationId
        in: path
        description: The application id
        required: true
        type: integer
        format: int32
      - name: filters
        in: query
        description: "A delimited list of field filters.\r\n<br /><br />Field name and value should be separated by a colon (:).\r\n<br /><br />Multiple fields should be separated by a plus (+). Multiple fields are treated as an AND condition. Example, fieldname1:value+fieldname2:value\r\n<br /><br />Multiple values for a field should be separated by a pipe (|). Mulitple values for a field are treated as an OR condition. Example, fieldname1:value1|value2\r\n<br /><br />Filtering is not supported for the following fields: suspended"
        required: false
        type: string
      - name: orderBy
        in: query
        description: The field name to order the results by.
        required: false
        type: string
      - name: orderByDirection
        in: query
        description: The direction to order the results by. ASC and DESC are valid values.
        required: false
        type: string
      - name: fields
        in: query
        description: Comma separated list of fields to return.
        required: false
        type: string
      - name: offset
        in: query
        description: Offset of the starting record. 0 indicates the first record.
        required: false
        type: integer
        format: int32
      - name: limit
        in: query
        description: Maximum records to return. The maximum value allowed is 50.
        required: false
        type: integer
        format: int32
      - name: modifiedStartDate
        in: query
        description: The modified on or after date.
        required: false
        type: string
        format: date-time
      responses:
        '200':
          description: Ok
          schema:
            $ref: '#/definitions/ReleaseListResponse'
        '400':
          description: BadRequest
          schema:
            $ref: '#/definitions/ErrorResponse'
        '401':
          description: Unauthorized
        '429':
          description: TooManyRequests
        '500':
          description: InternalServerError
  /api/v3/applications/{applicationId}/issue-count-by-severity:
    get:
      tags:
      - Applications
      summary: Retrieves number of issues by severity for an application
      description: 'Allowed Scopes: api-tenant, view-apps'
      operationId: ApplicationsV3_GetApplicationIssueCount
      consumes: []
      produces:
      - application/json
      - text/json
      - application/xml
      - text/xml
      parameters:
      - name: applicationId
        in: path
        description: The application id
        required: true
        type: integer
        format: int32
      responses:
        '200':
          description: Ok
          schema:
            $ref: '#/definitions/ApplicationIssueCountListResponse'
        '400':
          description: BadRequest
          schema:
            $ref: '#/definitions/ErrorResponse'
        '401':
          description: Unauthorized
        '404':
          description: NotFound
        '429':
          description: TooManyRequests
        '500':
          description: InternalServerError
  /api/v3/applications/{applicationId}/scans:
    get:
      tags:
      - Applications
      summary: Returns a list of scans for the given application
      description: 'Allowed Scopes: api-tenant, view-apps'
      operationId: ApplicationsV3_GetScansByApplicationId
      consumes: []
      produces:
      - application/json
      - text/json
      - application/xml
      - text/xml
      parameters:
      - name: applicationId
        in: path
        description: The application id
        required: true
        type: integer
        format: int32
      - name: orderBy
        in: query
        description: The field name to order the results by.
        required: false
        type: string
      - name: orderByDirection
        in: query
        description: The direction to order the results by. ASC and DESC are valid values.
        required: false
        type: string
      - name: fields
        in: query
        description: Comma separated list of fields to return.
        required: false
        type: string
      - name: offset
        in: query
        description: Offset of the starting record. 0 indicates the first record.
        required: false
        type: integer
        format: int32
      - name: limit
        in: query
        description: Maximum records to return. The maximum value allowed is 50.
        required: false
        type: integer
        format: int32
      responses:
        '200':
          description: Ok
          schema:
            $ref: '#/definitions/ScanListResponse'
        '400':
          description: BadRequest
          schema:
            $ref: '#/definitions/ErrorResponse'
        '401':
          description: Unauthorized
        '404':
          description: NotFound
        '429':
          description: TooManyRequests
        '500':
          description: InternalServerError
  /api/v3/applications/{applicationId}/bug-tracker:
    get:
      tags:
      - Applications
      summary: Returns the bug tracker settings for the given application
      description: 'Allowed Scopes: api-tenant, view-apps'
      operationId: ApplicationsV3_GetApplicationBugTracker
      consumes: []
      produces:
      - application/json
      - text/json
      - application/xml
      - text/xml
      parameters:
      - name: applicationId
        in: path
        description: The application id
        required: true
        type: integer
        format: int32
      responses:
        '200':
          description: Ok
          schema:
            $ref: '#/definitions/ApplicationBugTracker'
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: NotFound
        '429':
          description: TooManyRequests
        '500':
          description: InternalServerError
  /api/v3/applications/{applicationId}/microservices:
    get:
      tags:
      - Applications
      summary: Retrieves a list of Microservices for an application
      description: 'Allowed Scopes: api-tenant, view-apps'
      operationId: ApplicationsV3_GetApplicationMicroservices
      consumes: []
      produces:
      - application/json
      - text/json
      - application/xml
      - text/xml
      parameters:
      - name: applicationId
        in: path
        description: The application id
        required: true
        type: integer
        format: int32
      - name: includeReleases
        in: query
        description: Value defaults to true if not specified.
        required: false
        type: boolean
      responses:
        '200':
          description: Ok
          schema:
            $ref: '#/definitions/MicroserviceListResponse'
        '401':
          description: Unauthorized
        '404':
          description: NotFound
        '429':
          description: TooManyRequests
        '500':
          description: InternalServerError
    post:
      tags:
      - Applications
      summary: Add a Microservice to an application
      description: 'Allowed Scopes: api-tenant, manage-apps'
      operationId: ApplicationsV3_PostApplicationMicroservice
      consumes:
      - application/json
      - text/json
      - application/xml
      - text/xml
      - application/x-www-form-urlencoded
      - multipart/form-data
      produces:
      - application/json
      - text/json
      - application/xml
      - text/xml
      parameters:
      - name: applicationId
        in: path
        description: The application id
        required: true
        type: integer
        format: int32
      - name: requestModel
        in: body
        description: The microservice data
        required: true
        schema:
          $ref: '#/definitions/PostMicroserviceRequest'
      responses:
        '200':
          description: Ok
          schema:
            $ref: '#/definitions/PostMicroserviceResponse'
        '401':
          description: Unauthorized
        '404':
          description: NotFound
        '429':
          description: TooManyRequests
        '500':
          description: InternalServerError
  /api/v3/applications/{applicationId}/microservices/{microserviceId}:
    put:
      tags:
      - Applications
      summary: Edit a Microservice for an application
      description: 'Allowed Scopes: api-tenant, manage-apps'
      operationId: ApplicationsV3_PutApplicationMicroservice
      consumes:
      - application/json
      - text/json
      - application/xml
      - text/xml
      - application/x-www-form-urlencoded
      - multipart/form-data
      produces:
      - application/json
      - text/json
      - application/xml
      - text/xml
      parameters:
      - name: applicationId
        in: path
        description: The application id
        required: true
        type: integer
        format: int32
      - name: microserviceId
        in: path
        description: The microservice id
        required: true
        type: integer
        format: int32
      - name: requestModel
        in: body
        description: The microservice data
        required: true
        schema:
          $ref: '#/definitions/PostMicroserviceRequest'
      responses:
        '200':
          description: Ok
          schema:
            $ref: '#/definitions/PostMicroserviceResponse'
        '401':
          description: Unauthorized
        '404':
          description: NotFound
        '429':
          description: TooManyRequests
        '500':
          description: InternalServerError
    delete:
      tags:
      - Applications
      summary: Delete a Microservice for an application
      description: 'Allowed Scopes: api-tenant, manage-apps'
      operationId: ApplicationsV3_DeleteApplicationMicroservice
      consumes: []
      produces:
      - application/json
      - text/json
      - application/xml
      - text/xml
      parameters:
      - name: applicationId
        in: path
        description: The application id
        required: true
        type: integer
        format: int32
      - name: microserviceId
        in: path
        description: The microservice id
        required: true
        type: integer
        format: int32
      responses:
        '200':
          description: Ok
          schema:
            $ref: '#/definitions/PostMicroserviceResponse'
        '401':
          description: Unauthorized
        '404':
          description: NotFound
        '429':
          description: TooManyRequests
        '500':
          description: InternalServerError
  /api/v3/applications/{applicationId}/audittemplates:
    get:
      tags:
      - Applications
      summary: Returns a list of audit templates for the given application
      description: 'Allowed Scopes: api-tenant, manage-issues'
      operationId: ApplicationsV3_GetAuditTemplates
      consumes: []
      produces:
      - application/json
      - text/json
      - application/xml
      - text/xml
      parameters:
      - name: applicationId
        in: path
        description: The application id
        required: true
        type: integer
        format: int32
      - name: scanType
        in: query
        description: The scan type<br /><br />Values can be obtained by calling GET /api/v3/lookup-items?type=ScanTypes
        required: false
        type: string
      responses:
        '200':
          description: Ok
          schema:
            $ref: '#/definitions/AuditTemplateListResponse'
        '401':
          description: Unauthorized
        '404':
          description: NotFound
        '429':
          description: TooManyRequests
        '500':
          description: InternalServerError
    put:
      tags:
      - Applications
      summary: Creates/Update Audit templates for the given application
      description: 'Allowed Scopes: api-tenant, manage-issues'
      operationId: ApplicationsV3_PutApplicationAuditTemplates
      consumes:
      - application/json
      - text/json
      - application/xml
      - text/xml
      - application/x-www-form-urlencoded
      produces:
      - application/json
      - text/json
      - application/xml
      - text/xml
      parameters:
      - name: applicationId
        in: path
        required: true
        type: integer
        format: int32
      - name: auditTemplatesRequest
        in: body
        required: true
        schema:
          type: array
          items:
            $ref: '#/definitions/PutAuditTemplateFilterRequest'
      responses:
        '200':
          description: Ok
          schema:
            $ref: '#/definitions/AuditTemplateResponse'
        '400':
          description: BadRequest
          schema:
            $ref: '#/definitions/AuditTemplateResponse'
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: NotFound
        '429':
          description: TooManyRequests
        '500':
          description: InternalServerError
  /api/v3/applications/{applicationId}/vulnerabilities/{Id}:
    get:
      tags:
      - Applications
      summary: Returns a list of vulnerabilities with matching InstanceId
      description: 'Allowed Scopes: api-tenant, view-issues'
      operationId: ApplicationsV3_GetVulnerabilityInstancesinApplicationByVulnerabilityId
      consumes: []
      produces:
      - application/json
      - text/json
      - application/xml
      - text/xml
      parameters:
      - name: applicationId
        in: path
        description: The application Id
        required: true
        type: integer
        format: int32
      - name: Id
        in: path
        description: The Issue id
        required: true
        type: integer
        format: int32
      - name: filters
        in: query
        description: "A delimited list of field filters.\r\n<br /><br />Field name and value should be separated by a colon (:).\r\n<br /><br />Multiple fields should be separated by a plus (+). Multiple fields are treated as an AND condition. Example, fieldname1:value+fieldname2:value.\r\n<br /><br />Multiple values for a field should be separated by a pipe (|). Mulitple values for a field are treated as an OR condition. Example, fieldname1:value1|value2.\r\n<br /><br />Filtering is not supported for the following fields: auditPendingAuditorStatus, auditPendingSuppression, checkId, closedDate, closedStatus, falsePositiveChallenge, instanceId, pci1_2, sink, source, stig6, suppressedBy, timeToFixDays"
        required: false
        type: string
      - name: orderBy
        in: query
        description: The field name to order the results by.
        required: false
        type: string
      - name: orderByDirection
        in: query
        description: The direction to order the results by. ASC and DESC are valid values.
        required: false
        type: string
      - name: fields
        in: query
        description: Comma separated list of fields to return.
        required: false
        type: string
      - name: offset
        in: query
        description: Offset of the starting record. 0 indicates the first record.
        required: false
        type: integer
        format: int32
      - name: limit
        in: query
        description: Maximum records to return. The maximum value allowed is 50.
        required: false
        type: integer
        format: int32
      - name: includeFixed
        in: query
        description: Indicates if items that have been fixed should be included in the return value. Value defaults to false if not specified.
        required: false
        type: boolean
      - name: includeSuppressed
        in: query
        description: Indicates if items that have been suppressed should be included in the return value. Value defaults to false if not specified.
        required: false
        type: boolean
      - name: keywordSearch
        in: query
        description: Used for keyword searches
        required: false
        type: string
      responses:
        '200':
          description: Ok
          schema:
            $ref: '#/definitions/GetVulnerabilitiesResponseVulnerabilityDTOLight'
        '202':
          description: Accepted
          schema:
            $ref: '#/definitions/ErrorResponse'
        '400':
          description: BadRequest
          schema:
            $ref: '#/definitions/ErrorResponse'
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: NotFound
        '429':
          description: TooManyRequests
        '500':
          description: InternalServerError
          schema:
            $ref: '#/definitions/ErrorResponse'
definitions:
  Scan:
    description: Scan
    type: object
    properties:
      applicationId:
        format: int32
        description: The application id
        type: integer
      applicationName:
        description: The application name
        type: string
      releaseId:
        format: int32
        description: The release id
        type: integer
      releaseName:
        description: The release name
        type: string
      scanId:
        format: int32
        description: The scan id
        type: integer
      scanTypeId:
        format: int32
        description: The scan type id. Values can be obtained by calling GET /api/v3/lookup-items?type=ScanTypes
        type: integer
      scanType:
        description: The scan type. Values can be obtained by calling GET /api/v3/lookup-items?type=ScanTypes
        type: string
      assessmentTypeId:
        format: int32
        description: The assessment type id. Values can be obtained by calling GET /api/v3/releases/{releaseId}/assessment-types
        type: integer
      assessmentTypeName:
        description: The assessment type name. Values can be obtained by calling GET /api/v3/releases/{releaseId}/assessment-types
        type: string
      analysisStatusTypeId:
        format: int32
        description: The analysis status type id. Values can be obtained by calling GET /api/v3/lookup-items?type=AnalysisStatusTypes
        type: integer
      analysisStatusType:
        description: The analysis status type. Values can be obtained by calling GET /api/v3/lookup-items?type=AnalysisStatusTypes
        type: string
      startedDateTime:
        format: date-time
        description: The scan started date time
        type: string
      completedDateTime:
        format: date-time
        description: The scan completed date time
        type: string
      totalIssues:
        format: int32
        description: Total number of issues
        type: integer
      issueCountCritical:
        format: int32
        description: Total number of critical issues
        type: integer
      issueCountHigh:
        format: int32
        description: Total number of high issues
        type: integer
      issueCountMedium:
        format: int32
        descrip

# --- truncated at 32 KB (67 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/fortify-software/refs/heads/main/openapi/fortify-software-applications-api-openapi.yml