Skip to content

Application Security Supported Fields

This document shows the fields supported by each provider and operation.

get_application_finding_details

FieldAmazon InspectorGitLabHCL AppScan on CloudOpenText Core Application SecurityType
activity_idnumber
activity_namestring
application.data.src_urlstring
application.data.type_altstring
application.namestring
application.typestring
application.uidstring
application.uid_altstring
application.url.hostnamestring
application.url.schemestring
application.url.url_stringstring
category_namestring
category_uidnumber
class_namestring
class_uidnumber
compliance.requirements[]string
compliance.standards[]string
confidence_scorenumber
finding_info.first_seen_timetimestamp
finding_info.last_seen_timetimestamp
finding_info.modified_timetimestamp
finding_info.product.namestring
finding_info.product.uidstring
finding_info.product.vendor_namestring
finding_info.src_urlstring
finding_info.titlestring
finding_info.uidstring
finding_info.uid_altstring
messagestring
metadata.product.feature.namestring
metadata.product.namestring
metadata.product.vendor_namestring
metadata.tenant_uidstring
metadata.versionstring
observables[].namestring
observables[].typestring
observables[].type_idnumber
observables[].valuestring
remediation.descstring
remediation.references[]string
severitystring
severity_idnumber
statusstring
status_idnumber
timenumber
timezone_offsetnumber
type_namestring
type_uidnumber
vulnerabilities[].advisory.descstring
vulnerabilities[].advisory.related_cves[].cvss[].base_scorenumber
vulnerabilities[].advisory.related_cves[].cvss[].overall_scorenumber
vulnerabilities[].advisory.related_cves[].cvss[].severitystring
vulnerabilities[].advisory.related_cves[].cvss[].vector_stringstring
vulnerabilities[].advisory.related_cves[].cvss[].vendor_namestring
vulnerabilities[].advisory.related_cves[].cvss[].versionstring
vulnerabilities[].advisory.related_cves[].epss.scorestring
vulnerabilities[].advisory.related_cves[].references[]string
vulnerabilities[].advisory.related_cves[].uidstring
vulnerabilities[].advisory.related_cwes[].src_urlstring
vulnerabilities[].advisory.related_cwes[].uidstring
vulnerabilities[].advisory.src_urlstring
vulnerabilities[].advisory.uidstring
vulnerabilities[].affected_code[].end_linenumber
vulnerabilities[].affected_code[].file.extstring
vulnerabilities[].affected_code[].file.namestring
vulnerabilities[].affected_code[].file.pathstring
vulnerabilities[].affected_code[].file.typestring
vulnerabilities[].affected_code[].file.type_idnumber
vulnerabilities[].affected_code[].file.uristring
vulnerabilities[].affected_code[].rule.uidstring
vulnerabilities[].affected_code[].start_linenumber
vulnerabilities[].affected_packages[].epochnumber
vulnerabilities[].affected_packages[].fixed_in_versionstring
vulnerabilities[].affected_packages[].namestring
vulnerabilities[].affected_packages[].package_managerstring
vulnerabilities[].affected_packages[].pathstring
vulnerabilities[].affected_packages[].versionstring
vulnerabilities[].categorystring
vulnerabilities[].cve.created_timetimestamp
vulnerabilities[].cve.cvss[].base_scorenumber
vulnerabilities[].cve.cvss[].vector_stringstring
vulnerabilities[].cve.cvss[].vendor_namestring
vulnerabilities[].cve.cvss[].versionstring
vulnerabilities[].cve.epss.percentilenumber
vulnerabilities[].cve.epss.scorestring
vulnerabilities[].cve.references[]string
vulnerabilities[].cve.related_cwes[].src_urlstring
vulnerabilities[].cve.related_cwes[].uidstring
vulnerabilities[].cve.uidstring
vulnerabilities[].cwe.src_urlstring
vulnerabilities[].cwe.uidstring
vulnerabilities[].is_exploit_availableboolean
vulnerabilities[].is_fix_availableboolean
vulnerabilities[].references[]string

query_application_findings

FieldAmazon InspectorGitLabHCL AppScan on CloudOpenText Core Application SecurityType
activity_idnumber
activity_namestring
application.data.src_urlstring
application.data.type_altstring
application.namestring
application.typestring
application.uidstring
application.uid_altstring
application.url.hostnamestring
application.url.pathstring
application.url.portnumber
application.url.query_stringstring
application.url.schemestring
application.url.url_stringstring
category_namestring
category_uidnumber
class_namestring
class_uidnumber
compliance.requirements[]string
compliance.standards[]string
finding_info.first_seen_timetimestamp
finding_info.last_seen_timetimestamp
finding_info.modified_timetimestamp
finding_info.product.namestring
finding_info.product.uidstring
finding_info.product.vendor_namestring
finding_info.src_urlstring
finding_info.titlestring
finding_info.uidstring
finding_info.uid_altstring
messagestring
metadata.product.feature.namestring
metadata.product.namestring
metadata.product.vendor_namestring
metadata.tenant_uidstring
metadata.versionstring
observables[].namestring
observables[].typestring
observables[].type_idnumber
observables[].valuestring
remediation.descstring
remediation.references[]string
severitystring
severity_idnumber
statusstring
status_idnumber
timenumber
timezone_offsetnumber
type_namestring
type_uidnumber
vulnerabilities[].advisory.descstring
vulnerabilities[].advisory.related_cves[].cvss[].base_scorenumber
vulnerabilities[].advisory.related_cves[].cvss[].overall_scorenumber
vulnerabilities[].advisory.related_cves[].cvss[].severitystring
vulnerabilities[].advisory.related_cves[].cvss[].vector_stringstring
vulnerabilities[].advisory.related_cves[].cvss[].vendor_namestring
vulnerabilities[].advisory.related_cves[].cvss[].versionstring
vulnerabilities[].advisory.related_cves[].epss.scorestring
vulnerabilities[].advisory.related_cves[].references[]string
vulnerabilities[].advisory.related_cves[].uidstring
vulnerabilities[].advisory.related_cwes[].src_urlstring
vulnerabilities[].advisory.related_cwes[].uidstring
vulnerabilities[].advisory.src_urlstring
vulnerabilities[].advisory.uidstring
vulnerabilities[].affected_code[].end_linenumber
vulnerabilities[].affected_code[].file.extstring
vulnerabilities[].affected_code[].file.namestring
vulnerabilities[].affected_code[].file.pathstring
vulnerabilities[].affected_code[].file.typestring
vulnerabilities[].affected_code[].file.type_idnumber
vulnerabilities[].affected_code[].file.uristring
vulnerabilities[].affected_code[].rule.uidstring
vulnerabilities[].affected_code[].start_linenumber
vulnerabilities[].affected_package[].namestring
vulnerabilities[].affected_package[].purlstring
vulnerabilities[].affected_package[].versionstring
vulnerabilities[].affected_packages[].epochnumber
vulnerabilities[].affected_packages[].fixed_in_versionstring
vulnerabilities[].affected_packages[].namestring
vulnerabilities[].affected_packages[].package_managerstring
vulnerabilities[].affected_packages[].pathstring
vulnerabilities[].affected_packages[].versionstring
vulnerabilities[].categorystring
vulnerabilities[].cve.created_timetimestamp
vulnerabilities[].cve.cvss[].base_scorenumber
vulnerabilities[].cve.cvss[].vector_stringstring
vulnerabilities[].cve.cvss[].vendor_namestring
vulnerabilities[].cve.cvss[].versionstring
vulnerabilities[].cve.epss.percentilenumber
vulnerabilities[].cve.epss.scorestring
vulnerabilities[].cve.references[]string
vulnerabilities[].cve.related_cwes[].src_urlstring
vulnerabilities[].cve.related_cwes[].uidstring
vulnerabilities[].cve.uidstring
vulnerabilities[].cwe.src_urlstring
vulnerabilities[].cwe.uidstring
vulnerabilities[].is_exploit_availableboolean
vulnerabilities[].is_fix_availableboolean
vulnerabilities[].references[]string

query_applications

FieldAmazon InspectorGitLabHCL AppScan on CloudOpenText Core Application SecurityType
criticalitystring
data.findings_countnumber
data.first_seen_timetimestamp
data.severity_count.criticalnumber
data.severity_count.highnumber
data.severity_count.informationalnumber
data.severity_count.lownumber
data.severity_count.mediumnumber
data.severity_count.unknownnumber
data.src_urlstring
data.type_altstring
data.unmapped.AddedToAssetGroupAtstring
data.unmapped.AddedToAssetGroupBy.Emailstring
data.unmapped.AddedToAssetGroupBy.FirstNamestring
data.unmapped.AddedToAssetGroupBy.Idstring
data.unmapped.AddedToAssetGroupBy.LastNamestring
data.unmapped.AddedToAssetGroupBy.UserNamestring
data.unmapped.AutoDeleteExceededScansboolean
data.unmapped.AvailabilityRequirementstring
data.unmapped.CanBeDeletedboolean
data.unmapped.CollateralDamagePotentialstring
data.unmapped.ConfidentialityRequirementstring
data.unmapped.CorrelationStatestring
data.unmapped.CreatedBystring
data.unmapped.HasExceedingIssuesNumberboolean
data.unmapped.HasExceedingScansNumberboolean
data.unmapped.IntegrityRequirementstring
data.unmapped.IsDebrickedScanEnabledboolean
data.unmapped.IssuesInProgressnumber
data.unmapped.LastUpdatedstring
data.unmapped.LockedToSubscriptionboolean
data.unmapped.MaxSeveritystring
data.unmapped.NScanExecutionsnumber
data.unmapped.NewIssuesnumber
data.unmapped.OpenIssuesnumber
data.unmapped.OverallComplianceboolean
data.unmapped.PreferredOfferingTypestring
data.unmapped.RR_MaxSeveritynumber
data.unmapped.ScanTechnologiesstring
data.unmapped.TargetDistributionstring
data.unmapped.Technologystring
data.unmapped.TestingStatusstring
data.unmapped.TotalScansnumber
data.unmapped.UseOnlyAppPresencesboolean
data.unmapped.archivedboolean
data.unmapped.currentAnalysisStatusTypestring
data.unmapped.currentAnalysisStatusTypeIdnumber
data.unmapped.currentMobileScanIdnumber
data.unmapped.currentStaticScanIdnumber
data.unmapped.dynamicCriticalnumber
data.unmapped.dynamicHighnumber
data.unmapped.dynamicLownumber
data.unmapped.dynamicMediumnumber
data.unmapped.forksCountnumber
data.unmapped.httpUrlToRepostring
data.unmapped.isPassedboolean
data.unmapped.issuesEnabledboolean
data.unmapped.languages[].namestring
data.unmapped.languages[].sharenumber
data.unmapped.lastActivityAtstring
data.unmapped.mergeRequestsEnabledboolean
data.unmapped.mobileAnalysisStatusTypestring
data.unmapped.mobileAnalysisStatusTypeIdnumber
data.unmapped.mobileCriticalnumber
data.unmapped.mobileHighnumber
data.unmapped.mobileLownumber
data.unmapped.mobileMediumnumber
data.unmapped.mobileScanDatestring
data.unmapped.nameWithNamespacestring
data.unmapped.namespace.fullNamestring
data.unmapped.namespace.idstring
data.unmapped.namespace.namestring
data.unmapped.namespace.pathstring
data.unmapped.onlyAllowMergeIfAllDiscussionsAreResolvedboolean
data.unmapped.onlyAllowMergeIfPipelineSucceedsboolean
data.unmapped.openIssuesCountnumber
data.unmapped.openSourceCriticalnumber
data.unmapped.openSourceHighnumber
data.unmapped.openSourceLownumber
data.unmapped.openSourceMediumnumber
data.unmapped.pathstring
data.unmapped.publicJobsboolean
data.unmapped.repository.rootRefstring
data.unmapped.requestAccessEnabledboolean
data.unmapped.sdlcStatusTypestring
data.unmapped.sdlcStatusTypeIdnumber
data.unmapped.sharedRunnersEnabledboolean
data.unmapped.snippetsEnabledboolean
data.unmapped.sshUrlToRepostring
data.unmapped.starCountnumber
data.unmapped.staticAnalysisStatusTypestring
data.unmapped.staticAnalysisStatusTypeIdnumber
data.unmapped.staticCriticalnumber
data.unmapped.staticHighnumber
data.unmapped.staticLownumber
data.unmapped.staticMediumnumber
data.unmapped.staticScanDatestring
data.unmapped.statistics.commitCountnumber
data.unmapped.statistics.repositorySizenumber
data.unmapped.suspendedboolean
data.unmapped.topics[]string
data.unmapped.updatedAtstring
data.unmapped.visibilitystring
data.unmapped.wikiEnabledboolean
descstring
group.descstring
group.domainstring
group.namestring
group.typestring
group.uidstring
namestring
owner.uidstring
risk_levelunknown
risk_level_idnumber
risk_scorenumber
typestring
uidstring
uid_altstring
url.url_stringstring

query_findings

FieldAmazon InspectorGitLabHCL AppScan on CloudOpenText Core Application SecurityType
activity_idnumber
activity_namestring
application.criticalitystring
application.data.findings_countnumber
application.data.first_seen_timetimestamp
application.data.severity_count.criticalnumber
application.data.severity_count.highnumber
application.data.severity_count.informationalnumber
application.data.severity_count.lownumber
application.data.severity_count.mediumnumber
application.data.severity_count.unknownnumber
application.data.src_urlstring
application.data.type_altstring
application.descstring
application.group.descstring
application.group.domainstring
application.group.namestring
application.group.typestring
application.group.uidstring
application.namestring
application.owner.uidstring
application.risk_levelstring
application.risk_level_idnumber
application.risk_scorenumber
application.typestring
application.uidstring
application.uid_altstring
application.url.url_stringstring
category_namestring
category_uidnumber
class_namestring
class_uidnumber
finding_info.first_seen_timetimestamp
finding_info.last_seen_timetimestamp
finding_info.modified_timetimestamp
finding_info.product.namestring
finding_info.product.uidstring
finding_info.product.vendor_namestring
finding_info.src_urlstring
finding_info.titlestring
finding_info.uidstring
finding_info.uid_altstring
messagestring
metadata.product.feature.namestring
metadata.product.namestring
metadata.product.vendor_namestring
metadata.tenant_uidstring
metadata.versionstring
observables[].namestring
observables[].typestring
observables[].type_idnumber
observables[].valuestring
remediation.descstring
remediation.references[]string
severitystring
severity_idnumber
statusstring
status_idnumber
timenumber
timezone_offsetnumber
type_namestring
type_uidnumber
vulnerabilities[].advisory.descstring
vulnerabilities[].advisory.uidstring
vulnerabilities[].affected_code[].end_linenumber
vulnerabilities[].affected_code[].file.namestring
vulnerabilities[].affected_code[].file.pathstring
vulnerabilities[].affected_code[].file.typestring
vulnerabilities[].affected_code[].file.type_idnumber
vulnerabilities[].affected_code[].file.uristring
vulnerabilities[].affected_code[].rule.uidstring
vulnerabilities[].affected_code[].start_linenumber
vulnerabilities[].affected_packages[].namestring
vulnerabilities[].affected_packages[].pathstring
vulnerabilities[].affected_packages[].versionstring
vulnerabilities[].categorystring
vulnerabilities[].cve.created_timetimestamp
vulnerabilities[].cve.cvss[].base_scorenumber
vulnerabilities[].cve.cvss[].versionstring
vulnerabilities[].cve.references[]string
vulnerabilities[].cve.related_cwes[].src_urlstring
vulnerabilities[].cve.related_cwes[].uidstring
vulnerabilities[].cve.uidstring
vulnerabilities[].cwe.src_urlstring
vulnerabilities[].cwe.uidstring
vulnerabilities[].is_fix_availableboolean