Vulnerabilities from a specific time frame

Hi - seeking advice on how to obtain vulnerability results from a specific time frame. I need to look back at a previous release and from what I can tell, SonarCloud does not have a way to look at historical vulnerability results. Is there an API call that will work here?

Hi,

Welcome to the community!

You can filter issues by when they were initially raised, using the Creation Date filter on the Issues page. What those search results won’t include is closed issues; they get cleaned out of the database.

If you really need to know what a project looked like on a certain date, your best bet is to check out the code from that date & run a fresh analysis. You’ll need to be careful you don’t over write your project’s current state though; you probably want to analyze it as a branch.

 
HTH,
Ann

1 Like

Great, thank you for the suggestion. Is there a way to extract the information via the Measures API? Or will we run into the same issues you mentioned?

Hi,

Assuming you have an analysis of the correct set of code, you can use the Issues API to get what you want. Just render the issues page and eavesdrop on the calls the UI makes to see what APIs you’re interested in.

 
HTH,
Ann