Cannot Query the Sonarcloud SCA Endpoint

SonarQube Cloud
, ,
1

I am trying to call the SonarCloud SCA API to fetch vulnerability information, but I’m unable to get it working in Postman.

I’m using the following endpoint as the base URL:

curl --request GET --url ‘https://api.sonarcloud.io/sca/risk-reports?component=organization_project&branch=master&riskType=VULNERABILITY’

I’m also using the token generated from the SonarCloud UI with:

Authorization: Bearer

However, the request is not working and getting the below error,

{“message”:“SCA feature is not enabled at Enterprise level”}

I am on Sonarcloud Team Plan With Advanced Security Add-on.

Can someone please help me on this?

Thank You!

2

Welcome to the community!

Can you share your organization key (i.e the first part of the value you’re passing in for organization_project)? I would like to verify that the Advanced Security add-on is correctly applied to your organization and hasn’t expired.

If you prefer not to share your organization key publicly, I can open up a DM with you and you can send it privately – just let me know.

3

Thanks! A DM works great for me. Please go ahead and open one up, and I’ll send the organization key over to you.

5

Hi @SelvaV,

I’ve escalated this to the engineering team for further investigation. I’ll reply back as soon as I have more information.

7

Thanks for the update! I appreciate you passing this along to the team. I’ll keep an eye out for your next update.