getApplications

Provides comprehensive details about all applications within an organization. It's an effective tool for assessing the security and operational characteristics of your applications. With this information, you can prioritize your actions based on business needs and security posture.

API provides you with the following capabilities:

• Fetching a list of applications.

• Returning data about application structure, security features, deployment environments, and more.

• Filtering and sorting applications based on various attributes and metrics.

Examples

GraphQL

query GetApplications($getApplicationsInput: GetApplicationsInput) {
  getApplications(getApplicationsInput: $getApplicationsInput) {
    applications {
      appId
      repoName
      appName
      branch
      branchesCount
      branchesToScan
      businessPriority
      codeChanges
      commitCount
      committersCount
      createdAt
      creator
      daysSinceLastCodeChange
      daysSinceRepoCreation
      deployedProd
      filesCount
      forksCount
      hasDownloads
      hasPackageContainers
      headSha
      irrelevantReasons
      languages {
        language
        languagePercentage
      }
      lastCodeChange
      new
      overrideRelevance
      overridePriority
      originalBusinessPriority
      publicVisibility
      pullCount
      pushCount
      relevant
      risk
      scanId
      scannedAt
      secInfrastructure {
        label
        clientCoverage
        oxCoverage
        noCoverage
        notApplicable
      }
      securityPosture
      appType
      appSubtype
      size
      type
      updated
      userCount
      version
      violationCount
      watchersCount
      yamlsCount
      scoreHistory {
        appId
        appName
        score
        date
        new
        updated
        scanId
      }
      applicationFlows {
        artifacts {
          type
          name
          hashType
          system
          subType
          hash
          size
          date
          location {
            runBy
            foundBy
            foundIn
            link
          }
          linkName
          k8sType
          cluster
          region
        }
        cloudDeployments {
          type
          subType
          name
          hash
          hashType
          link
          location {
            runBy
            foundBy
            foundIn
            link
          }
          k8sType
          imageName
          date
          cluster
          region
        }
        cicdInfo {
          type
          system
          latestDate
          lastMonthJobCount
          location {
            runBy
            foundBy
            foundIn
            link
          }
        }
        orchestrators {
          type
          name
          hashType
          system
          hash
          size
          date
          location {
            runBy
            foundBy
            foundIn
            link
          }
        }
        kubernetes {
          type
          name
          hashType
          system
          hash
          subType
          size
          date
          location {
            runBy
            foundBy
            foundIn
            link
          }
        }
        repository {
          type
          system
          date
          location {
            runBy
            foundBy
            foundIn
            link
          }
        }
      }
      appOwners {
        name
        email
        roles
      }
      fakeApp
      link
      branchLink
      issues
      categories {
        categoryName
        categoryId
        catId
        severities {
          info
          low
          medium
          high
          critical
          appox
        }
        score
        severityScore
        total
        reason
      }
      toolsCoverage {
        toolName
        oxDelivered
        coverage
        type
        sources {
          match
          type
        }
      }
      pipeline {
        jobId
        jobTriggeredAt
        scanResult
        issuesCount
        jobTriggeredBy
        jobUrl
      }
      organization
      pipelineScans
      issuesBySeverity {
        info
        low
        medium
        high
        critical
        appox
      }
      pkgManagers
      sbomCount
      isMonoRepoChild
      monoRepoParent
      monorepoChildrenCount
      monorepoChildrenAppIds
      tags {
        tagId
        name
        email
        displayName
        tagType
        createdBy
        purpose
        deploymentModel
        tagCategory
      }
      dockerfiles {
        path
      }
      severityChangedReason {
        tagId
        changeNumber
        shouldBeSeverityFactor
        requiredHits
        reason
        shortName
        changeCategory
        changePlusReasonFacet
        extraInfo {
          key
          link
          snippet {
            detectionType
            fileName
            snippetLineNumber
            language
            text
          }
        }
      }
      apiInventoriesTotal
      credentialsId
      oxInPipeline
      oxInPipelineDescription
      primaryAppReason
      primaryApp
      matchedProjects {
        toolName
        matchedProjects {
          externalToolProject
          matchMethod
        }
      }
      toolName
      createdAtOx
      irrelevantDate
      prevFullScanDate
      prevFullScanId
      lastFullScanDate
      lastFullScanId
      isFullScan
      appClassification
    }
    offset
    total
    totalFilteredApps
    showHistoricalTrend
    totalIrrelevantApps
    selectedPosition
    topOffset
  }
}

Variables

This is an example input showing all available input fields. Only fields marked as required in the schema are mandatory.

{
  "getApplicationsInput": {
    "scanId": "c9da693d-8906-4a32-93c9-2ffdb1cebb99",
    "dateRange": {
      "from": 1749000000000,
      "to": 1749900000000
    },
    "orderBy": {
      "field": "BusinessPriority",
      "direction": "ASC",
      "category": "example"
    },
    "limit": 100,
    "page": 1,
    "offset": 0,
    "applicationFilters": ["New"],
    "irrelevancyFilters": ["Archived"],
    "filters": {
      "fakeApp": true,
      "appId": ["30966426"],
      "categories": ["example"],
      "cicd": ["example"],
      "repoTypes": ["example"],
      "orchestrators": ["example"],
      "artifacts": ["example"],
      "artifactsSystem": ["example"],
      "cloudDeployments": ["example"],
      "kubernetes": ["example"],
      "sca": ["example"],
      "sast": ["example"],
      "secretSearch": ["example"],
      "iac": ["example"],
      "securityToolSource": ["example"],
      "oxInPipeline": ["example"],
      "languages": ["example"],
      "riskScore": {
        "from": 7,
        "to": 10
      },
      "businessPriority": {
        "from": 13.37,
        "to": 13.37
      },
      "pkgManagers": ["example"],
      "isMonoRepoChild": ["example"],
      "tags": ["example"],
      "appClassification": ["example"],
      "originBranchName": ["example"],
      "irrelevantReasons": ["example"],
      "reachability": ["example"],
      "toolName": ["example"]
    },
    "systemFilter": {
      "name": "cicd",
      "type": "example"
    },
    "owners": ["example"],
    "tagIds": ["example"],
    "search": "example",
    "filterSearch": [
      {
        "fieldName": "example",
        "value": ["example"]
      }
    ],
    "isAppIdOnly": true,
    "appId": "30966426",
    "topOffset": 42,
    "scrollDirection": "example",
    "openItems": ["digest"],
    "irrelevant": true,
    "ignoreLimit": true,
    "conditionalFilters": [
      {
        "condition": "AND",
        "fieldName": "digest",
        "values": ["example"],
        "greaterThan": 13.37,
        "lessThan": 13.37
      }
    ],
    "getLatestStableData": true
  }
}

cURL

Node.js

Python

Arguments

You can use the following argument(s) to customize your getApplications query.

Argument	Description	Supported fields
getApplicationsInput GetApplicationsInput	Parameters for filtering, sorting, and paginating the applications list, including search criteria and display preferences	scanId String dateRange DateRange orderBy OrderAppsBy limit Int page Int offset Int applicationFilters [ApplicationsFilter] irrelevancyFilters [IrrelevancyFilter] filters AppFilters systemFilter SystemFilter owners [String] tagIds [String] search String filterSearch [AutoCompleteSearch] isAppIdOnly Boolean appId String topOffset Int scrollDirection String openItems [FilterTypes] irrelevant Boolean ignoreLimit Boolean conditionalFilters [ConditionalFilters] getLatestStableData Boolean

Fields

Return type: ApplicationsResponse

You can use the following field(s) to specify what information your getApplications query will return. Please note that some fields may have their own subfields.

Field	Description	Supported fields
applications [Application]	List of applications matching the query criteria	id String appId String repoName String appName String branch String branchesCount Int branchesToScan [String] businessPriority Float codeChanges Int commitCount Int committersCount Int createdAt String creator String daysSinceLastCodeChange Int daysSinceRepoCreation Int deployedProd Boolean filesCount Int forksCount Int hasDownloads Boolean hasPackageContainers Boolean headSha String irrelevantReasons [String] languages [Language] lastCodeChange String new Boolean overrideRelevance String overridePriority Int originalBusinessPriority Float publicVisibility Boolean pullCount Int pushCount Int relevant Boolean risk Float scanId String scannedAt Float secInfrastructure [ServerSecurityInfraItem] securityPosture Float appType String appSubtype String size Float tagsCount Int type String updated Boolean userCount Int version String violationCount Int watchersCount Int yamlsCount Int scoreHistory [ScoreHistoryItem] applicationFlows ApplicationFlow isSbomPresent Boolean appOwners [OwnerInfo] offset Int improvement Float fakeApp Boolean link String branchLink String issues Int categories [AppCategories] toolsCoverage [AppToolCoverage] pipeline Pipeline isPipelineConfigured String organization String repoRealName String repoId String pipelineScans Int issuesBySeverity Severities pkgManagers [String] sbomCount Int isMonoRepoChild Boolean monoRepoParent String monorepoChildrenCount Int monorepoChildrenAppIds [String] tags [AppTag] dockerfiles [Dockerfile] severityChangedReason [ApplicationSeverityChangedReason] apiInventoriesTotal Int credentialsId String oxInPipeline String oxInPipelineDescription String primaryAppReason String primaryApp Boolean matchedProjects [MatchedProjects] toolName String createdAtOx String irrelevantDate String prevFullScanDate String prevFullScanId String lastFullScanDate String lastFullScanId String isFullScan Boolean appClassification [String]
offset Int	Number of records skipped in the result set
total Int	Total number of applications in the system
totalFilteredApps Int	Number of applications matching the current filter criteria
showHistoricalTrend Boolean	Indicates if historical trend data is available
totalIrrelevantApps Int	Total count of applications marked as irrelevant
selectedPosition Int	Current position in the paginated result set
topOffset Int	Offset value used for top-level pagination