Palo Alto Networks Errors API
The Errors API from Palo Alto Networks — 10 operation(s) for errors.
OpenAPI Specification
openapi: 3.2.0
info:
contact: {}
description: 'The Errors endpoints are listed below.
'
title: Prisma Cloud Code API Overview Errors API
version: Latest
servers: null
tags:
- name: Errors
paths:
/code/api/v1/errors/file:
post:
deprecated: true
description: List errors in files
operationId: getErrorsInFile
parameters:
- in: query
name: limit
required: false
schema:
format: int32
maximum: 100
minimum: 1
type: integer
- in: query
name: offset
required: false
schema:
format: int32
minimum: 0
type: integer
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/GetErrorsInFileWithFilters'
required: true
responses:
'200':
content:
application/json:
examples:
Example 1:
value:
data:
- author: author
category: IAM
commitHash: 5c6b5d60
createdBy: checkov_terraform
errorId: BC_AWS_S3_14
errorLines: []
fileMetadataUuid: de707daa-2ef3-40e1-8bbf-5e39f86b927e
filePath: /terraform/aws/s3.tf
fixPath: checkov/yourname/yourGithubName/yourRepo/master/fixes/BC_AWS_S3_14/aws_s3_bucket.data/terraform/aws/s3.tf
fixedCode: "resource \"aws_s3_bucket\" \"data\" { \n # bucket is public \n bucket = \"$\n{local.resource_prefix.value}-data\" \n force_destroy = true \n tags = merge({ \n Name = \"${local.resource_prefix.value}-data\" \n Environment = local.resource_prefix.value \n }) \n server_side_encryption_configuration { \n rule { \n apply_server_side_encryption_by_default { \n sse_algorithm = \"AES256\" \n } \n } \n }"
fixes: []
frameworkType: Terraform
isFixable: true
lines:
- 1
- 21
metadataChecksMetadataPath: checkov/yourname/yourGithubName/yourRepo/master/checkov_results/terraform/checks_metadata.json
resourceCode: "resource \"aws_s3_bucket\" \"data\" { \n # bucket is public \n bucket = \"$\n{local.resource_prefix.value}-data\" \n force_destroy = true \n tags = merge({ \n Name = \"${local.resource_prefix.value}-data\" \n Environment = local.resource_prefix.value \n })"
resourceId: /terraform/aws/s3.tf:aws_s3_bucket.data
resourceType: aws_s3_bucket.data
runtimeFrameworkType: null
runtimeId: null
runtimeSourceId: null
scannerType: Checkov
secretValidationStatus: Valid
selectedFix: null
sourceType: Github
status: OPEN
hasNext: true
schema:
$ref: '#/components/schemas/ErrorsInFileWithPaginationResponse'
description: Get errors in file
'422':
description: Request arguments validation error
security:
- CustomAuthorizer: []
summary: Lists All Errors in File Path
tags:
- Errors
x-bc-required-permissions:
- CCSProjects_READ
x-codeSamples:
- lang: Python + Requests
source: "import requests\n\nurl = \"http://undefinedundefined/code/api/v1/errors/file\"\n\nquerystring = {\"limit\":\"SOME_INTEGER_VALUE\",\"offset\":\"SOME_INTEGER_VALUE\"}\n\npayload = {\n \"CICDRunId\": 0,\n \"authors\": [\"string\"],\n \"branch\": \"string\",\n \"categories\": [\"IAM\"],\n \"codeStatus\": [\"hasFix\"],\n \"excludeCategories\": [\"IAM\"],\n \"filePath\": \"string\",\n \"fileTypes\": [\"build.gradle\"],\n \"repository\": \"string\",\n \"repositoryId\": \"string\",\n \"search\": {\n \"options\": [\"path\"],\n \"text\": \"string\",\n \"title\": \"title\"\n },\n \"severities\": [\"CRITICAL\"],\n \"sourceTypes\": [\"Github\"],\n \"tags\": [\n {\n \"key\": \"string\",\n \"value\": \"string\"\n }\n ],\n \"types\": [\"Errors\"]\n}\nheaders = {\n \"content-type\": \"application/json\",\n \"authorization\": \"REPLACE_KEY_VALUE\"\n}\n\nresponse = requests.request(\"POST\", url, json=payload, headers=headers, params=querystring)\n\nprint(response.text)"
- lang: Shell + Curl
source: "curl --request POST \\\n --url 'http://undefinedundefined/code/api/v1/errors/file?limit=SOME_INTEGER_VALUE&offset=SOME_INTEGER_VALUE' \\\n --header 'authorization: REPLACE_KEY_VALUE' \\\n --header 'content-type: application/json' \\\n --data '{\"CICDRunId\":0,\"authors\":[\"string\"],\"branch\":\"string\",\"categories\":[\"IAM\"],\"codeStatus\":[\"hasFix\"],\"excludeCategories\":[\"IAM\"],\"filePath\":\"string\",\"fileTypes\":[\"build.gradle\"],\"repository\":\"string\",\"repositoryId\":\"string\",\"search\":{\"options\":[\"path\"],\"text\":\"string\",\"title\":\"title\"},\"severities\":[\"CRITICAL\"],\"sourceTypes\":[\"Github\"],\"tags\":[{\"key\":\"string\",\"value\":\"string\"}],\"types\":[\"Errors\"]}'"
/code/api/v1/errors/files:
post:
deprecated: true
description: List files with errors.
operationId: getErrorsFiles
parameters: []
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/GetErrorsFilters'
required: true
responses:
'200':
content:
application/json:
examples:
Example 1:
value:
data:
- awaitingRemediationCount: 0
errorsCount: 0
filePath: /terraform/gcp/instances.tf
fixedCount: 0
openErrorsCount: 0
passedCount: 3
suppressedErrorsCount: 0
schema:
$ref: '#/components/schemas/GetErrorsFilesResponseBody'
description: Get errors files
'422':
description: Request arguments validation error
'500':
description: Couldn't fetch files with errors
security:
- CustomAuthorizer: []
summary: Lists Files with Errors
tags:
- Errors
x-bc-required-permissions:
- CCSProjects_READ
x-codeSamples:
- lang: Python + Requests
source: "import requests\n\nurl = \"http://undefinedundefined/code/api/v1/errors/files\"\n\npayload = {\n \"CICDRunId\": 0,\n \"authors\": [\"string\"],\n \"branch\": \"string\",\n \"categories\": [\"IAM\"],\n \"codeStatus\": [\"hasFix\"],\n \"excludeCategories\": [\"IAM\"],\n \"fileTypes\": [\"build.gradle\"],\n \"repository\": \"string\",\n \"repositoryId\": \"string\",\n \"search\": {\n \"options\": [\"path\"],\n \"text\": \"string\",\n \"title\": \"title\"\n },\n \"severities\": [\"CRITICAL\"],\n \"sourceTypes\": [\"Github\"],\n \"tags\": [\n {\n \"key\": \"string\",\n \"value\": \"string\"\n }\n ],\n \"types\": [\"Errors\"]\n}\nheaders = {\n \"content-type\": \"application/json\",\n \"authorization\": \"REPLACE_KEY_VALUE\"\n}\n\nresponse = requests.request(\"POST\", url, json=payload, headers=headers)\n\nprint(response.text)"
- lang: Shell + Curl
source: "curl --request POST \\\n --url http://undefinedundefined/code/api/v1/errors/files \\\n --header 'authorization: REPLACE_KEY_VALUE' \\\n --header 'content-type: application/json' \\\n --data '{\"CICDRunId\":0,\"authors\":[\"string\"],\"branch\":\"string\",\"categories\":[\"IAM\"],\"codeStatus\":[\"hasFix\"],\"excludeCategories\":[\"IAM\"],\"fileTypes\":[\"build.gradle\"],\"repository\":\"string\",\"repositoryId\":\"string\",\"search\":{\"options\":[\"path\"],\"text\":\"string\",\"title\":\"title\"},\"severities\":[\"CRITICAL\"],\"sourceTypes\":[\"Github\"],\"tags\":[{\"key\":\"string\",\"value\":\"string\"}],\"types\":[\"Errors\"]}'"
/code/api/v1/errors/files/{uuid}:
get:
deprecated: true
description: Get the file metadata by UUID based on the customer's repository.
operationId: getErrorsInFiles
parameters:
- in: path
name: uuid
required: true
schema:
type: string
- in: query
name: include
required: false
schema:
type: string
responses:
'200':
content:
application/json:
examples:
Example 1:
value:
data:
commitId: null
creationDate: '2022-02-21T09:26:36.431Z'
errorsCount: '46'
id: 1ff27bcd-9044-42ab-a773-ba6707cb35a9
name: rds.tf
path: terraform/aws/rds.tf
prId: null
type: tf
updatedDate: '2022-02-21T09:26:36.431Z'
schema:
$ref: '#/components/schemas/GetFileMetadataResponse'
description: Get errors in file
'422':
description: Request arguments validation error
'500':
description: failed to fetch file by UUID
security:
- CustomAuthorizer: []
summary: Get File Metadata by UUID
tags:
- Errors
x-codeSamples:
- lang: Python + Requests
source: 'import requests
url = "http://undefinedundefined/code/api/v1/errors/files/{uuid}"
querystring = {"include":"SOME_STRING_VALUE"}
headers = {"authorization": "REPLACE_KEY_VALUE"}
response = requests.request("GET", url, headers=headers, params=querystring)
print(response.text)'
- lang: Shell + Curl
source: "curl --request GET \\\n --url 'http://undefinedundefined/code/api/v1/errors/files/{uuid}?include=SOME_STRING_VALUE' \\\n --header 'authorization: REPLACE_KEY_VALUE'"
/code/api/v1/errors/getFixedCode:
post:
deprecated: true
description: Returns a remediated resource code
operationId: getFixedCode
parameters: []
requestBody:
content:
application/json:
schema:
properties:
error:
$ref: '#/components/schemas/DefaultBranchViolationToFix'
required:
- error
type: object
required: true
responses:
'200':
content:
application/json:
examples:
Example 1: {}
schema:
type: string
description: string representing a fixed resource code
'422':
description: Request arguments validation error
'500':
description: Could not get fixed code for customer $CUSTOMER_NAME with error $ERROR
security:
- CustomAuthorizer: []
summary: Get Fixed Resource Code using the selectedFix
tags:
- Errors
x-bc-required-permissions:
- CCSProjects_READ
x-codeSamples:
- lang: Python + Requests
source: "import requests\n\nurl = \"http://undefinedundefined/code/api/v1/errors/getFixedCode\"\n\npayload = {\"error\": {\n \"errorLines\": [0],\n \"fixPath\": \"string\",\n \"fixedCode\": \"string\",\n \"fixes\": [\n {\n \"code\": \"string\",\n \"fixedCode\": \"string\",\n \"id\": \"string\",\n \"inspectedKey\": \"string\",\n \"percent\": 0,\n \"recommenderType\": \"string\",\n \"times\": 0\n }\n ],\n \"frameworkType\": \"string\",\n \"fullId\": \"string\",\n \"inspectedKey\": \"string\",\n \"metadataChecksMetadataPath\": \"string\",\n \"metadataLines\": [0],\n \"owner\": \"string\",\n \"repoName\": \"string\",\n \"resourceCode\": \"string\",\n \"resourceId\": \"string\",\n \"runtimeId\": \"string\",\n \"runtimeSourceId\": \"string\",\n \"s3FilePath\": \"string\",\n \"selectedFix\": \"string\",\n \"violationId\": \"string\"\n }}\nheaders = {\n \"content-type\": \"application/json\",\n \"authorization\": \"REPLACE_KEY_VALUE\"\n}\n\nresponse = requests.request(\"POST\", url, json=payload, headers=headers)\n\nprint(response.text)"
- lang: Shell + Curl
source: "curl --request POST \\\n --url http://undefinedundefined/code/api/v1/errors/getFixedCode \\\n --header 'authorization: REPLACE_KEY_VALUE' \\\n --header 'content-type: application/json' \\\n --data '{\"error\":{\"errorLines\":[0],\"fixPath\":\"string\",\"fixedCode\":\"string\",\"fixes\":[{\"code\":\"string\",\"fixedCode\":\"string\",\"id\":\"string\",\"inspectedKey\":\"string\",\"percent\":0,\"recommenderType\":\"string\",\"times\":0}],\"frameworkType\":\"string\",\"fullId\":\"string\",\"inspectedKey\":\"string\",\"metadataChecksMetadataPath\":\"string\",\"metadataLines\":[0],\"owner\":\"string\",\"repoName\":\"string\",\"resourceCode\":\"string\",\"resourceId\":\"string\",\"runtimeId\":\"string\",\"runtimeSourceId\":\"string\",\"s3FilePath\":\"string\",\"selectedFix\":\"string\",\"violationId\":\"string\"}}'"
/code/api/v1/errors/gitBlameAuthors:
get:
deprecated: true
description: Get all git blame author names per full repo name (owner and name)
operationId: getGitBlameAuthors
parameters:
- in: query
name: fullRepoName
required: true
schema:
type: string
- description: '- Github, Bitbucket, Gitlab, AzureRepos, cli, AWS, Azure, GCP, githubEnterprise,
gitlabEnterprise, bitbucketEnterprise, terraformCloud, tfcRunTasks, githubActions, circleci, codebuild,
jenkins, kubernetesWorkloads, Kubernetes, admissionController'
in: query
name: sourceType
required: true
schema:
type: string
responses:
'200':
content:
application/json:
schema:
items:
type: string
type: array
description: array of author names
'400':
description: Could not get git blame authors, check GET query params
'422':
description: Request arguments validation error
'500':
description: Could not get git blames authors
security:
- CustomAuthorizer: []
summary: List Git Authors of a Repository
tags:
- Errors
x-bc-required-permissions:
- CCSProjects_READ
x-codeSamples:
- lang: Python + Requests
source: 'import requests
url = "http://undefinedundefined/code/api/v1/errors/gitBlameAuthors"
querystring = {"fullRepoName":"SOME_STRING_VALUE","sourceType":"SOME_STRING_VALUE"}
headers = {"authorization": "REPLACE_KEY_VALUE"}
response = requests.request("GET", url, headers=headers, params=querystring)
print(response.text)'
- lang: Shell + Curl
source: "curl --request GET \\\n --url 'http://undefinedundefined/code/api/v1/errors/gitBlameAuthors?fullRepoName=SOME_STRING_VALUE&sourceType=SOME_STRING_VALUE' \\\n --header 'authorization: REPLACE_KEY_VALUE'"
/code/api/v1/errors/submitActions:
post:
deprecated: true
description: Invokes the suppress fix function in the correct service CI/CD remediations service based on the type of submit (PR or DEFAULT), array of violationsToSuppress, and array of violations to fix.
operationId: submitActions
parameters: []
requestBody:
content:
application/json:
example:
type: default
violationsToFix:
- fixedCode: ''
frameworkType: Terraform
fullId: BC_AWS_S3_14::milkanas/terragoat::/terraform/aws/s3.tf:aws_s3_bucket.data
metadataChecksMetadataPath: checkov/milkanast/milkanas/terragoat/master/checkov_results/terraform/checks_metadata.json
metadataLines:
- 1
- 13
owner: milkanas
repoName: terragoat
resourceId: /terraform/aws/s3.tf:aws_s3_bucket.data
runtimeId: null
runtimeSourceId: null
s3FilePath: checkov/milkanast/milkanas/terragoat/master/src/terraform/aws/s3.tf
violationId: BC_AWS_S3_14
violationsToSuppress:
- comment: this is justification comment
resources:
- accountId: orevron/terragoat
id: BC_GIT_6::orevron/terragoat::/terraform/providers.tf:4ec71f2183bf24b28320d0c2839bdd08c255f0bb
- accountId: orevron/terragoat
id: BC_GIT_6::orevron/terragoat::/terraform/lambda.tf:ca61f30c56f9b66c8802632d559a391acd02d01d
suppressionType: Resources
violationId: BC_AWS_S3_13
schema:
$ref: '#/components/schemas/SubmitActionsRequest'
required: true
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/SubmitActionsResponse'
description: ''
'401':
description: Insufficient role permissions
'422':
description: Request arguments validation error
'500':
description: 'type: TYPE not supported.'
security:
- CustomAuthorizer: []
summary: Submit Remediation and Suppression Actions
tags:
- Errors
x-bc-required-permissions:
- CCSProjects_CREATE
x-codeSamples:
- lang: Python + Requests
source: "import requests\n\nurl = \"http://undefinedundefined/code/api/v1/errors/submitActions\"\n\npayload = {\n \"cvesToSuppress\": [\n {\n \"CICDRunId\": 0,\n \"bulkSuppression\": True,\n \"id\": \"string\",\n \"justification\": {\n \"comment\": \"string\",\n \"createdBy\": \"string\",\n \"expirationTime\": 0\n },\n \"repository\": \"string\",\n \"resourceId\": \"string\",\n \"violationId\": \"string\"\n }\n ],\n \"metadata\": {\n \"owner\": \"string\",\n \"pr\": \"string\",\n \"repoName\": \"string\",\n \"runNumber\": 0,\n \"sourceBranchName\": \"string\"\n },\n \"sourceType\": \"string\",\n \"type\": \"default\",\n \"violationsToFix\": [\n {\n \"CICDRunId\": 0,\n \"bulkSuppression\": True,\n \"commentIds\": [\"string\"],\n \"creationDate\": \"string\",\n \"errorLines\": [0],\n \"frameworkType\": \"string\",\n \"justification\": {\n \"comment\": \"string\",\n \"createdBy\": \"string\",\n \"expirationTime\": 0\n },\n \"justificationId\": \"string\",\n \"metadataChecksMetadataPath\": \"string\",\n \"metadataLines\": [0],\n \"repository\": \"string\",\n \"resourceId\": \"string\",\n \"runtimeId\": \"string\",\n \"runtimeSourceId\": \"string\",\n \"s3FilePath\": \"string\",\n \"s3FixFilePath\": \"string\",\n \"severity\": \"string\",\n \"status\": \"string\",\n \"updatedDate\": \"string\",\n \"vcsCommentLine\": \"string\",\n \"violationId\": \"string\"\n }\n ],\n \"violationsToSuppress\": [\n {\n \"CICDRunId\": 0,\n \"bulkSuppression\": True,\n \"commentIds\": [\"string\"],\n \"creationDate\": \"string\",\n \"errorLines\": [0],\n \"frameworkType\": \"string\",\n \"justification\": {\n \"comment\": \"string\",\n \"createdBy\": \"string\",\n \"expirationTime\": 0\n },\n \"justificationId\": \"string\",\n \"metadataChecksMetadataPath\": \"string\",\n \"metadataLines\": [0],\n \"repository\": \"string\",\n \"resourceId\": \"string\",\n \"runtimeId\": \"string\",\n \"runtimeSourceId\": \"string\",\n \"s3FilePath\": \"string\",\n \"s3FixFilePath\": \"string\",\n \"severity\": \"string\",\n \"status\": \"string\",\n \"updatedDate\": \"string\",\n \"vcsCommentLine\": \"string\",\n \"violationId\": \"string\"\n }\n ]\n}\nheaders = {\n \"content-type\": \"application/json\",\n \"authorization\": \"REPLACE_KEY_VALUE\"\n}\n\nresponse = requests.request(\"POST\", url, json=payload, headers=headers)\n\nprint(response.text)"
- lang: Shell + Curl
source: "curl --request POST \\\n --url http://undefinedundefined/code/api/v1/errors/submitActions \\\n --header 'authorization: REPLACE_KEY_VALUE' \\\n --header 'content-type: application/json' \\\n --data '{\"cvesToSuppress\":[{\"CICDRunId\":0,\"bulkSuppression\":true,\"id\":\"string\",\"justification\":{\"comment\":\"string\",\"createdBy\":\"string\",\"expirationTime\":0},\"repository\":\"string\",\"resourceId\":\"string\",\"violationId\":\"string\"}],\"metadata\":{\"owner\":\"string\",\"pr\":\"string\",\"repoName\":\"string\",\"runNumber\":0,\"sourceBranchName\":\"string\"},\"sourceType\":\"string\",\"type\":\"default\",\"violationsToFix\":[{\"CICDRunId\":0,\"bulkSuppression\":true,\"commentIds\":[\"string\"],\"creationDate\":\"string\",\"errorLines\":[0],\"frameworkType\":\"string\",\"justification\":{\"comment\":\"string\",\"createdBy\":\"string\",\"expirationTime\":0},\"justificationId\":\"string\",\"metadataChecksMetadataPath\":\"string\",\"metadataLines\":[0],\"repository\":\"string\",\"resourceId\":\"string\",\"runtimeId\":\"string\",\"runtimeSourceId\":\"string\",\"s3FilePath\":\"string\",\"s3FixFilePath\":\"string\",\"severity\":\"string\",\"status\":\"string\",\"updatedDate\":\"string\",\"vcsCommentLine\":\"string\",\"violationId\":\"string\"}],\"violationsToSuppress\":[{\"CICDRunId\":0,\"bulkSuppression\":true,\"commentIds\":[\"string\"],\"creationDate\":\"string\",\"errorLines\":[0],\"frameworkType\":\"string\",\"justification\":{\"comment\":\"string\",\"createdBy\":\"string\",\"expirationTime\":0},\"justificationId\":\"string\",\"metadataChecksMetadataPath\":\"string\",\"metadataLines\":[0],\"repository\":\"string\",\"resourceId\":\"string\",\"runtimeId\":\"string\",\"runtimeSourceId\":\"string\",\"s3FilePath\":\"string\",\"s3FixFilePath\":\"string\",\"severity\":\"string\",\"status\":\"string\",\"updatedDate\":\"string\",\"vcsCommentLine\":\"string\",\"violationId\":\"string\"}]}'"
/code/api/v1/errors/supply-chain-fix:
post:
deprecated: true
description: 'The API is responsible for handling remediations from the supply chain screen. It receives a repository''s UUID,
a list of IaC resources UUIDs and a list of packages UUIDs to be remediated, and returns the remediation response when available'
operationId: supply-chain-fix
parameters: []
requestBody:
content:
application/json:
example:
packagesToFix:
- 0cbcbeca-1318-4657-8994-6ea413fb9947
- 41732c34-6d28-4ea5-8d8a-0ff724884ac4
repositoryId: fa3219c3-7da5-41bb-a9a5-b2fb5542fc13
resourcesToFix:
- e8b299db-f08a-4870-9ed9-6d09409e4ce5
- c3eb359e-c499-4b56-a1bb-77770be845ca
schema:
$ref: '#/components/schemas/SupplyChainFixRequest'
required: true
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/SubmitActionsResponse'
description: ''
'422':
description: Request arguments validation error
'500':
description: Could not handle supply chain fix
security:
- CustomAuthorizer: []
summary: Submit Remediation Operations from Supply Chain Screen
tags:
- Errors
x-bc-required-permissions:
- CCSSupplyChain_CREATE
x-codeSamples:
- lang: Python + Requests
source: "import requests\n\nurl = \"http://undefinedundefined/code/api/v1/errors/supply-chain-fix\"\n\npayload = {\n \"packagesToFix\": [\"string\"],\n \"repositoryId\": \"string\",\n \"resourcesToFix\": [\"string\"]\n}\nheaders = {\n \"content-type\": \"application/json\",\n \"authorization\": \"REPLACE_KEY_VALUE\"\n}\n\nresponse = requests.request(\"POST\", url, json=payload, headers=headers)\n\nprint(response.text)"
- lang: Shell + Curl
source: "curl --request POST \\\n --url http://undefinedundefined/code/api/v1/errors/supply-chain-fix \\\n --header 'authorization: REPLACE_KEY_VALUE' \\\n --header 'content-type: application/json' \\\n --data '{\"packagesToFix\":[\"string\"],\"repositoryId\":\"string\",\"resourcesToFix\":[\"string\"]}'"
/api/v2/code-issues/branch_scan:
post:
operationId: getPeriodicFindings
parameters: []
requestBody:
content:
application/json:
schema:
allOf:
- properties:
filters:
$ref: '#/components/schemas/BranchScanFilters'
description: "Filters to retrieve selective issues. Use the following fields to filter the search results:\n- checkStatus: Security violation status filter. Filter scan results using a status value:\n - Error: Security violation was detected.\n - Passed: No security violation\n - Suppressed: A security issue was identified, but was acknowledged and intentionally suppressed.\n - FixPending: An automated fix has been issued to the security violation, and is currently being applied to the associated resource.\n- gitUsers: Git user filter. Filter security findings based on the Git user who modified the code or configuration files.\n- codeCategories: The `scopes` search criteria is also available as a filter.\n- secretsRiskFactors: Secrets risk factor filter:\n - PublicRepository: Secret was found in a public repository.\n - PrivateRepository: Secret was found in a private repository.\n - User: User who committed the secret.\n - Privileged: Secret is for a role with privileged access to a Cloud Service Provider account.\n - Valid: Secret has been validated as an active secret by the service provider.\n - Invalid: Secret received an invalid response when used against the service provider’s API.\n - Unknown: Secret that could not be verified.\n - FoundInHistory: Secret was found in the Git history but not in the most recent commit.\n- iacCategories (optional): Infrastructure as code categories filter:\n - IAM (Identity and Access Management): Issues related to IAM configurations.\n - Logging: Issues related to log management and monitoring.\n - Monitoring: Issues related to monitoring and observability configurations.\n - Networking: Issues related to network configurations, such as open ports, insecure protocols, or misconfigured security groups.\n - Kubernetes: Issues specific to Kubernetes cluster configurations.\n - General: Issues that do not fit into specific predefined categories. It may include issues related to best practices, compliance checks, or general security hygiene.\n - Serverless: Issues specific to serverless function configurations, such as function permissions or environment variable protection\n - Elasticsearch: Issues related to Elasticsearch configurations, such as exposed clusters, lack of encryption, or insecure access controls.\n - Storage: Issues related to storage configurations, such as public buckets, insecure access policies, or encryption settings.\n - Secrets: Issues related to the handling and management of sensitive information, such as API keys, passwords, or cryptographic keys.\n - Public: Issues related to public-facing resources, such as exposed APIs, publicly accessible assets, or misconfigured CDN (Content Delivery Network) settings. Vulnerabilities - Vulnerabilities in your code or infrastructure including issues related to outdated software versions, known security vulnerabilities, or insecure dependencies. Compute - Issues related to compute resources, including virtual machine configurations, instance roles, or container security. VCS (Version Control Systems) - Issues associated with version control systems, such as Git repositories. Build Integrity - Issues related to the integrity of your build processes or artifacts. It involves ensuring that the build pipeline is secure, free from tampering, and follows secure build practices. Licenses - Issues related to open-source licenses in your codebase. Drift - Issues related to configuration drift, where the actual deployed infrastructure deviates from the desired state defined in the IaC templates. Policy3D - Issues related to 3rd-party policies or standards. It involves evaluating and ensuring compliance with external security policies or regulatory frameworks.\n- severities: Severity filter:\n - Critical: High-risk vulnerabilities or misconfigurations that could lead to significant security breaches or data leaks. These issues require immediate attention and remediation.\n - High: Significant security issues that have the potential to be exploited or result in significant damage if left unaddressed. These findings should be addressed as a priority.\n - Medium: Issues that pose a potential security risk that are less severe than Critical and High. Remediation of these issues should be prioritized, but they may not require immediate attention.\n - Low: Low severity indicates issues that have a minimal impact on security or are relatively low-risk. While they may not pose an immediate threat, it is still recommended to address them to maintain a robust security posture.\n - Info: Info severity is used for informational findings or recommendations that do not pose an immediate security risk but provide helpful guidance, best practices, or suggestions for optimization. These findings can be considered as part of ongoing security hygiene efforts.\n- iacTags: Filter violation based on the tag assigned to the resource.\n- fileTypes: File type filter. Use one of the available file type strings to retrieve issues with files of that type.\n- Benchmarks: Benchmarks filter. Use one of the available benchmark strings to retrieve issues based on the corresponding security benchmark or compliance standard.\n- iacLabels: IaC filter. Use one of the following IaC labels to retrieve corresponding issues:\n - CustomPolicy: whether or not the presented security issue is associated with a custom policy created by the user.\n - HasFix: whether or not a fix suggestion is provided for the presented security issue.\n- vulnerabilityRiskFactors: Vulnerability Risk Factors filter. Use one of the following vulnerability risk factor labels to retrieve corresponding issues:\n - Attack Complexity: Level of effort or skill required for an attacker to exploit a vulnerability. A higher complexity indicates that it is more challenging for an attacker to exploit the vulnerability.\n - Attack Vector: Path or means through which an attacker can exploit a vulnerability. It describes the method or entry point an attacker can use to access the vulnerable system or application.\n - DoS (Denial of Service): DoS vulnerabilities that can be exploited to disrupt or disable the normal functioning of a system or application.\n - HasFix: Vulnerabilities that have a fix or solution, such as a patch, update, or recommended mitigation steps to address the vulnerability.\n - RemoteExecution: Vulnerabilities that can be exploited remotely, without direct physical or local access to the target system.\n - Exp
# --- truncated at 32 KB (114 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-errors-api-openapi.yml