Get all issues (vulnerabilities) from all master branchs - api request

SonarQube Server / Community Build
1

Hi Team.
We have our sonarqube platform deployed on-premise, and we want to get several info about the issues, that are part Master branch of all the projects in our environment.
I was trying to get the info in an excel sheet, and for this i was using son API request (basic python api request), but trying this endpoint did not get much of the info i need:
https://test.com/api/issues/search?types=VULNERABILITY
So instead, i tried this one:
“https://test.com/api/issues/search?branch=master”
But with this i have more doubts, because this showed more than 10k issues… and i want to know if this is a valid representation of all the master branch of all the projects?
Or… is there any way to get all the issues for several specific projects?

some notes:
SonarQube platform is in version 10.6
the “test” domain is replaced with the real domain, of course.

Thanks in advance.
Enzo.

2

Hey there.

What edition of SonarQube are you using (Community Build, Developer Edition, Enterprise Edtion…)?

3

Hi Colin.
I’m using Enterprise edition.
The options in reporting are not as granular as i’d like… or maybe i’m missing something jaja.
Thanks in advance.

4

I think what you ultimately want to do is what you initially proposed, and call:

https://test.com/api/issues/search?types=VULNERABILITY

It’s not super obvious, but when you don’t provide the branch parameter (which can only be used alongside components), you are only getting the results from the main branch.

So I suppose back to your point earlier:

What information was missing? Make sure you’ve explored adding facets as described in the Web API documentation to get more info.

image
image1810×1244 138 KB

For example, if you need the creation date, you can change your query to:

https://test.com/api/issues/search?types=VULNERABILITY&facets=createdAt

5

Hi colin.
I may be missing something, but if i want all the vulnerabilities listed for all the projects belonging a portfolio, how could be the right endpoint/url?
[test.com/api/issues/search?types=VULNERABILITY&branch=master&component=“my_portfolio”&ps=500&p=1]
I checked the api documentation, but i’m entirely not sure.
And the portfolio name has an space between words.

Thanks.

6

All Portfolios have a key that is separate from the name. You’ll see this key in the URL when viewing the portfolio (https://next.sonarqube.com/sonarqube/portfolio?id=MASTER_PROJECT where MASTER_PROJECT is the key) or in the Portfolio Settings > Edit Definition space of your Portfolio.

You cannot specify a branch with a Portfolio, but portfolios are made up of project branches – so just make sure you’ve constructed a portfolio with only main branches if that’s your requirement.

7

Hi Colin.
With this i could get the info i needed, thanks.