Need to pull report of vulnerabilities and execution flows via API

[cindykoch96]

I have a question regarding a vulnerability detected by SonarCloud.

Upon clicking the identified ‘vulnerability’, SonarCloud displays 446 execution flows. Is it possible to download these execution flows/data into a report, or access them via API to create a customized report?

Our objective is to filter these flows based on specific criteria, which is not feasible on the vulnerability page view.

I checked the APIs, but am not seeing any API for vulnerabilities , or execution flows which is what we are trying to pull.

[Colin]

Hey there.

This guide should help you.

How to reverse engineer the Sonar Web API

Every action that is taken in the SonarQube / SonarCloud UI is driven by the Web API. There is nothing you can do in SonarQube / SonarCloud that you cannot do using the Web API. We put a great deal of effort into the UI and UX of our products and sincerely think that most actions should be completed there. Especially when it comes to viewing analysis results, the UI is the best place to view up-to-date information with the right context. We think it is much better that you give access…