Skip to main content

SourceCodeVulnerability

No description

type SourceCodeVulnerability implements BaseFields, IssueInterface, VulnerabilityInterface {
  aiAgentAnalysis: AiAgentAnalysis
  asset: Asset!
  assignedUsers: [PortalUserBasicInfoType!]
  author: PortalUser!
  category: String
  compromisedEnvironment: Boolean!
  createdAt: ISO8601DateTime!
  description: String!
  detail: SourceCodeVulnerabilityDetail!
  history: [IssueHistory!]
  id: ID
  impactDescription(
    blob: Boolean = false
  ): String!
  impactLevel: ImpactLevelCategory
  patterns: [String!]
  permittedStatus: [IssueStatusLabel!]!
  probabilityLevel: ProbabilityLevelCategory
  project: Project
  reference: String
  riskAcceptedUntil: ISO8601DateTime
  runningRetestProject: Project
  severity: SeverityCategory
  solution: String
  status: IssueStatusLabel!
  statusHistory: [IssueStatusHistory!]!
  stepsToReproduce(
    blob: Boolean = false
  ): String!
  summary(
    blob: Boolean = false
  ): String!
  title: String!
  type: Issue!
  updatedAt: ISO8601DateTime!
}

Fields​

SourceCodeVulnerability.aiAgentAnalysis ● AiAgentAnalysis object​

AI agent analysis information for this issue

SourceCodeVulnerability.asset ● Asset! non-null object​

The asset associated with the vulnerability

SourceCodeVulnerability.assignedUsers ● [PortalUserBasicInfoType!] list object​

SourceCodeVulnerability.author ● PortalUser! non-null object​

The author who created the vulnerability

SourceCodeVulnerability.category ● String scalar​

CWE Categories

SourceCodeVulnerability.compromisedEnvironment ● Boolean! non-null scalar​

Indicates whether the environment has been compromised due to the vulnerability

SourceCodeVulnerability.createdAt ● ISO8601DateTime! non-null scalar​

The date when record was created

SourceCodeVulnerability.description ● String! non-null scalar​

A detailed description of the vulnerability

SourceCodeVulnerability.detail ● SourceCodeVulnerabilityDetail! non-null object​

Detailed information about the Source Code vulnerability

SourceCodeVulnerability.history ● [IssueHistory!] list object​

SourceCodeVulnerability.id ● ID scalar​

The ID scalar type represents a unique identifier

SourceCodeVulnerability.impactDescription ● String! non-null scalar​

A detailed description of the impact caused by the vulnerability

SourceCodeVulnerability.impactDescription.blob ● Boolean scalar​

SourceCodeVulnerability.impactLevel ● ImpactLevelCategory enum​

The impact level of the vulnerability

SourceCodeVulnerability.patterns ● [String!] list scalar​

OWASP Patterns

SourceCodeVulnerability.permittedStatus ● [IssueStatusLabel!]! non-null enum​

List of statuses available for change

SourceCodeVulnerability.probabilityLevel ● ProbabilityLevelCategory enum​

The probability level of the vulnerability being exploited

SourceCodeVulnerability.project ● Project object​

Associated project

SourceCodeVulnerability.reference ● String scalar​

Links for further information

SourceCodeVulnerability.riskAcceptedUntil ● ISO8601DateTime scalar​

The datetime until which the risk is accepted

SourceCodeVulnerability.runningRetestProject ● Project object​

Active Vulnerability Retest project associated with this vulnerability

SourceCodeVulnerability.severity ● SeverityCategory enum​

The severity of the vulnerability

SourceCodeVulnerability.solution ● String scalar​

The solution or mitigation for the vulnerability

SourceCodeVulnerability.status ● IssueStatusLabel! non-null enum​

The current status of the vulnerability

SourceCodeVulnerability.statusHistory ● [IssueStatusHistory!]! non-null object​

List of previous statuses

SourceCodeVulnerability.stepsToReproduce ● String! non-null scalar​

Steps to reproduce the vulnerability

SourceCodeVulnerability.stepsToReproduce.blob ● Boolean scalar​

SourceCodeVulnerability.summary ● String! non-null scalar​

A brief summary or description of the vulnerability

SourceCodeVulnerability.summary.blob ● Boolean scalar​

SourceCodeVulnerability.title ● String! non-null scalar​

The title of the vulnerability

SourceCodeVulnerability.type ● Issue! non-null enum​

The type of the vulnerability (e.g., SAST, SCA, Web, Network, etc.)

SourceCodeVulnerability.updatedAt ● ISO8601DateTime! non-null scalar​

The date when record was updated

Interfaces​

BaseFields interface​

IssueInterface interface​

VulnerabilityInterface interface​

Member Of​

CreateSourceCodeVulnerabilityPayload object ● UpdateSourceCodeVulnerabilityPayload object

Contribute to the Docs

Found something outdated or missing? Help us improve the documentation with a quick suggestion or edit.

How to contribute

Resources

By exploring our content, you'll find resources that will enhance your understanding of the importance of a Security Application Program.

Conviso Blog: Explore our blog, which offers a collection of articles and posts covering a wide range of AppSec topics. The content on the blog is primarily in English.

Conviso's YouTube Channel: Access a wealth of informative videos covering various topics related to AppSec. Please note that the content is primarily in Portuguese.