Checkmarx · Schema

ResultListResponse

Application SecurityCode AnalysisDevSecOpsSASTSecurity TestingVulnerability Scanning

Properties

Name Type Description
totalCount integer Total number of results
results array
View JSON Schema on GitHub

JSON Schema

checkmarx-result-list-response-schema.json Raw ↑
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/checkmarx/main/json-schema/checkmarx-result-list-response-schema.json",
  "title": "ResultListResponse",
  "x-generated": "2026-10-04",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/checkmarx-results-api-openapi.yml#/components/schemas/ResultListResponse",
  "type": "object",
  "properties": {
    "totalCount": {
      "type": "integer",
      "description": "Total number of results"
    },
    "results": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/Result"
      }
    }
  },
  "$defs": {
    "Result": {
      "type": "object",
      "properties": {
        "id": {
          "type": "string",
          "format": "uuid",
          "description": "Result unique identifier"
        },
        "similarityId": {
          "type": "string",
          "description": "Similarity ID for tracking across scans"
        },
        "status": {
          "type": "string",
          "enum": [
            "NEW",
            "RECURRENT"
          ],
          "description": "Result status"
        },
        "state": {
          "type": "string",
          "enum": [
            "TO_VERIFY",
            "NOT_EXPLOITABLE",
            "PROPOSED_NOT_EXPLOITABLE",
            "CONFIRMED",
            "URGENT"
          ],
          "description": "Triage state"
        },
        "severity": {
          "type": "string",
          "enum": [
            "CRITICAL",
            "HIGH",
            "MEDIUM",
            "LOW",
            "INFO"
          ],
          "description": "Severity level"
        },
        "type": {
          "type": "string",
          "enum": [
            "sast",
            "sca",
            "kics",
            "apisec"
          ],
          "description": "Engine type that found this result"
        },
        "data": {
          "type": "object",
          "description": "Engine-specific result data",
          "properties": {
            "queryId": {
              "type": "string",
              "description": "SAST query identifier"
            },
            "queryName": {
              "type": "string",
              "description": "SAST query name"
            },
            "group": {
              "type": "string",
              "description": "Query group name"
            },
            "languageName": {
              "type": "string",
              "description": "Programming language"
            },
            "nodes": {
              "type": "array",
              "items": {
                "$ref": "#/$defs/ResultNode"
              },
              "description": "Code flow nodes (SAST)"
            },
            "packageIdentifier": {
              "type": "string",
              "description": "Package identifier (SCA)"
            },
            "recommendedVersion": {
              "type": "string",
              "description": "Recommended package version (SCA)"
            }
          }
        },
        "description": {
          "type": "string",
          "description": "Finding description"
        },
        "vulnerabilityDetails": {
          "type": "object",
          "properties": {
            "cweId": {
              "type": "integer",
              "description": "CWE identifier"
            },
            "cvss": {
              "type": "number",
              "format": "float",
              "description": "CVSS score"
            },
            "cveName": {
              "type": "string",
              "description": "CVE identifier"
            },
            "compliances": {
              "type": "array",
              "items": {
                "type": "string"
              },
              "description": "Compliance standards references"
            }
          }
        },
        "firstFoundAt": {
          "type": "string",
          "format": "date-time",
          "description": "When the result was first found"
        },
        "foundAt": {
          "type": "string",
          "format": "date-time",
          "description": "When the result was found in this scan"
        }
      }
    },
    "ResultNode": {
      "type": "object",
      "properties": {
        "fileName": {
          "type": "string",
          "description": "Source file name"
        },
        "line": {
          "type": "integer",
          "description": "Line number"
        },
        "column": {
          "type": "integer",
          "description": "Column number"
        },
        "length": {
          "type": "integer",
          "description": "Code length"
        },
        "methodLine": {
          "type": "integer",
          "description": "Method start line"
        },
        "name": {
          "type": "string",
          "description": "Node name"
        },
        "fullName": {
          "type": "string",
          "description": "Fully qualified name"
        }
      }
    }
  }
}

Work with this as data

Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for schemas

4 MCP tools reach this
  • find_json_schemasBrowse and filter every JSON Schema in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This JSON Schema
curl "https://apis.io/api/v1/json-schemas/checkmarx-result-list-response"
All schemas
curl "https://apis.io/api/v1/json-schemas?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.