v1

latestOpenAPI 3.1.02026-07-261690320.7 KB

Export all issues

Returns a list of all issues (open, ignored, snoozed, closed,..) in your account in JSON or CSV format

get/issues/export

Query parameters

format'json' | 'csv'

The format of the export

filter_status'all' | 'open' | 'ignored' | 'snoozed' | 'closed'

A filter to only export issues that have a given status.

filter_team_idinteger

Unique ID of the team

A filter to only export issues that belong to a given team

filter_issue_group_idinteger

Unique ID of the issue group

A filter to only export issues that belong to a given issue group

filter_code_repo_idinteger

Unique ID of the code repository

A filter to only export issues that belong to a given code repo

filter_code_repo_namestring

The name of the code repo

A filter to only export issues that belong to a code repo which matches this name exactly

filter_container_repo_idinteger

Unique ID of the container repository

A filter to only export issues that belong to a given container repo

filter_container_repo_namestring

The name of the container

A filter to only export issues that belong to a container repo which matches this name exactly

filter_container_repo_idsstring

A string of comma separated unique ID's of the container repositories

A filter to only export issues that belong to given container repos (up to 15). Multiple values should be comma separated. Only available for Pro and Scale workspaces.

filter_domain_idinteger

Unique ID of the domain

A filter to only export issues that belong to a given domain

filter_virtual_machine_idinteger

Unique ID of the virtual machine

A filter to only export issues that belong to a given virtual machine

A filter to only export issues that have a give type. 'app_level_open_source' excludes open source issues found in containers or virtual machines, while 'open_source' includes open source issues for all attack surfaces.

filter_severities'critical' | 'high' | 'medium' | 'low'

A filter to only export issues with the specified severities. Multiple values should be comma separated.

sla_remediate_by_afterinteger

A filter to only export issues with a sla_remediate_by timestamp after the specified unix timestamp (in seconds).

sla_remediate_by_beforeinteger

A filter to only export issues with a sla_remediate_by timestamp before the specified unix timestamp (in seconds).

A filter to only export issues of the specified language.

pageinteger

The page number to export. Leave empty to export all issues.

per_pageinteger

The number of issues to export per page when pagination is used.

Response

A list of issues, sorted descending by their priority in the requested format

idinteger required

The issue ID.

group_idinteger required

The issue group ID.

The type of issues in this group.

rulestring

The name of the rule that caused this finding (eg 'SQL injection')

rule_idstring

The id of the rule that caused this finding (eg 'aik_cloud_aws_001')

attack_surface'frontend' | 'backend' | 'docker_container' | 'cloud' required

The attack surface of this issue.

severity_scoreinteger required

A number indicating the importance of the vulnerability

original_cvss_severity_scoreinteger

A number indicating the importance of the vulnerability based on the original CVSS score

severity'critical' | 'high' | 'medium' | 'low' required

A human friendly version of the issue's importance

status'open' | 'ignored' | 'snoozed' | 'closed' required

The current status of the issue.

affected_packagestring

The name of affected open-source package, if any

affected_filestring

The name of affected file, if any

cve_idstring

CVE ID in case of an issue of type open_source

first_detected_atinteger required

A timestamp indicating when the issue was first created

code_repo_idinteger

The id of the code repository where this issue was found

code_repo_namestring

The name of code repository where this issue was found

cloud_idinteger

The id of the cloud where this issue was found

cloud_namestring

The name of the cloud where this issue was found

container_repo_idinteger

The id of the container image where this issue was found

container_repo_namestring

The name of the container image where this issue was found

domain_idinteger

The id of the domain where this issue was found

domain_namestring

The name of the domain where this issue was found

virtual_machine_idinteger

The id of the virtual machine where this issue was found

virtual_machine_namestring

The name of the virtual machine where this issue was found

pentest_project_idinteger

The id of the pentest project where this issue was found

sla_daysinteger

The amount of days wherein this issue should be fixed following the configured SLA for this severity

sla_remediate_byinteger

An epoch timestamp in seconds by when this issue should be fixed following the configured SLA for this severity

ignored_atinteger

A timestamp indicating when the issue was ignored. This value will be 'null' if it is not ignored.

ignored_bystring

A string indicating the way this issue got ignored. Can be one of the following: 'auto', 'user', 'rule', 'api'.

closed_atinteger

A timestamp indicating when the issue was closed. This value will be 'null' if it is not closed.

start_lineinteger

A number indicating the line number of the file where the affected code of the issue begins. This value will be 'null' when the issue is not a sast or secret issue.

end_lineinteger

A number indicating the line number of the file where the affected code of the issue ends. This value will be 'null' when the issue is not a sast or secret issue.

snooze_untilinteger

A timestamp indicating until when the issue will be snoozed. This value will be 'null' if the issue not snoozed.

cwe_classesstring[]

A list of CWE classes that apply to this issue

installed_versionstring

The current version of the package related to this issue. This is only applicable for issues of type 'open_source'.

patched_versionsstring[]

A list of versions that contain a fix for this issue. This is only applicable for issues of type 'open_source'.

license_typestring

The license type related to this issue. This is only applicable for issues of type 'license'.

programming_languagestring

The programming language related to this issue. This is only applicable for issues of type 'open_source' and 'sast'.

exploitability'actively_exploited' | 'poc_exists' | 'no_known_exploit'

The exploitability of this issue. This field can be null when we don't have enough information to determine the exploitability.

Example response

[
  {
    "id": 1,
    "group_id": 1,
    "attack_surface": "backend",
    "status": "open",
    "severity": "critical",
    "severity_score": 90,
    "original_cvss_severity_score": 90,
    "type": "open_source",
    "rule": "SQL injection",
    "rule_id": "aik_cloud_aws_001",
    "affected_package": "minimist",
    "affected_file": "index.php",
    "first_detected_at": 1700489005,
    "code_repo_name": "test-service",
    "code_repo_id": 1,
    "container_repo_id": 1,
    "container_repo_name": "aikido/test-service",
    "domain_id": 4,
    "domain_name": "https://aikido.dev",
    "virtual_machine_id": 10,
    "virtual_machine_name": "aikido-demo-ec2",
    "pentest_project_id": 1,
    "sla_days": 5,
    "sla_remediate_by": 1700924603,
    "ignored_at": null,
    "ignored_by": "user",
    "closed_at": null,
    "start_line": 68,
    "end_line": 70,
    "snooze_until": null,
    "cwe_classes": [
      "CWE-89"
    ],
    "installed_version": "4.2.0",
    "patched_versions": [
      "4.2.1",
      "5.0.0"
    ],
    "license": null,
    "programming_language": "PHP",
    "exploitability": "actively_exploited"
  }
]