Skip to main content
POST
List SCA vulnerabilities

Authorizations

X-ZeroPath-API-Token-Id
string
header
required
X-ZeroPath-API-Token-Secret
string
header
required

Body

application/json
organizationId
string
repositoryIds
string[]
page
integer
default:1
Required range: x >= 1
pageSize
integer
default:50
Required range: x >= 1
searchQuery
string
ecosystems
string[]
groupBy
enum<string>
default:none

Group vulnerabilities by CVE or by CVE+manifest

Available options:
none,
cve,
cve_manifest
advisoryQuery
string

Filter by advisory identifier or alias (CVE, GHSA, etc.)

dependencyNames
string[]

Filter by dependency/package names (contains match)

transitivity
enum<string>

Filter by direct vs transitive dependencies. When omitted, returns both direct and transitive.

Available options:
direct,
transitive
reachability
enum<string>[]

Filter by exploitability status. When omitted, defaults to all four: reachable, needs_review, unreachable, and not_tested.

Available options:
reachable,
needs_review,
unreachable,
not_tested
hasWizExposure
enum<boolean>

Filter to vulnerabilities associated with applications exposed by Wiz

Available options:
true

Response

Successful response

vulnerabilities
object[]
totalCount
integer
page
integer
pageSize
integer