Retrieve Security Hotspots through Web API

[padma_priyakantipaka]

Hello,

how to get security hotspots for a project through api call?

Thanks,
Padmapriya

[Colin]

Hey there.

I’ve moved your thread to a new topic instead of bumping an older (mostly unrelated) one.

What version of SonarQube are you using? And, to fulfill my own curiosity, why do you want to retrieve this data?

[padma_priyakantipaka]

Hi colin,

I am using sonarqube 8.6… I want to retreive the security hotspots generated for a project in sonarqube in json format.

previously for 8.0 version…security hotspots were part of issues and I could retrive them through api format like this->
“sonarurl/api/issues/search?pageSize=500&componentKeys=projectkey&branch=master&ps=500&types=SECURITY_HOTSPOT”.

now as I could see security hotspots are no longer part of issue type…Now how should I form my api to get the securityhotspots generated for a particular sonar project?

[Colin]

@padma_priyakantipaka

I want to retreive the security hotspots generated for a project in sonarqube in json format.

I got that, but I was curious Why? What do you use the information for outside of SonarQube? It’s useful to understand why our users try and do what they do.

You can find Web APIs related to Hotspots under the api/hotspots domain of web services. Some will be marked Internal (check the box in the upper left of the Web API documentation for your SonarQube instance)

[padma_priyakantipaka]

because sonar doesnt provide a way to download the issues generated. I found a way to do an api call and the resulted json is then used to extract the content to an excel sheet so that people can work on the issues even when they are offline…

I checked the section u mentioned but…what is hotspot parameter there? and how can we get SH’s for a particular project key?this wasnt mentioned there…

[Colin]

Take a look at the Internal APIs.

@Colin

Some will be marked Internal (check the box in the upper left of the Web API documentation for your SonarQube instance)

[padma_priyakantipaka]

Got it thankyou

[padma_priyakantipaka]

Hey Colin,

could you please help me with this.

External issues status updation

hello, I have issues reported for my project through PMD analysis and am allowing sonarqube to consume the report through external properties. Now I can see the external issues in sonar UI.but am not able to change the issue status from open to confirmed…there is no dropdown available. I am using SonarQube 8.5.1 version. Could someone help how will be able to change the issue status for these?