# aggItem
Represents an aggregated item with comprehensive metadata related to an issue, vulnerability, repository, user activity, dependencies, cloud infrastructure, and resolution details. Used for detailed tracking, reporting, and analysis of security and development issues.
### Examples
```graphql
type AggItem {
originalSeverity: Int
oxSeverity: Int
callBranch: [String]
linkToExternalProduct: String
stars: String
forks: String
downloads: String
vulBySeverity: String
nameAndVer: String
sourceRepoName: String
sourceRepoLink: String
sourceCreationDate: String
sourceLastModifyDate: String
destinationRepoName: String
destinationRepoLink: String
destinationCreationDate: String
destinationLastModifyDate: String
destinationRepoVisibility: String
reasons: String
_id: String
url: String
additionalToolData: String
events: String
allEvents: String
pushType: String
sha: String
title: String
link: String
mergedBy: String
date: String
fileCount: Int
diffInDays: Int
reviewers: String
user: String
userLink: String
userAvatar: String
devOperation: String
devOperationDate: String
adminOperation: String
adminOperationDate: String
reviewOperation: String
reviewOperationDate: String
orgRole: String
earliestActivityDate: String
repoPermissions: String
adminLocation: String
email: String
pullRequestsCount: Int
diffFromNowToCreatedAtInDays: Int
username: String
accessLevel: String
createdAt: String
lastAccess: String
fileName: String
fileUri: String
startLine: Int
endLine: Int
match: String
snippet: String
commitLink: String
commitBy: String
changeAuthorName: String
mergeDate: String
dateCommitPushed: String
pullRequestNumber: String
pullRequestLink: String
codeOwners: [String]
region: String
eduVideoLink: String
resource: String
service: String
accountName: String
cloudEnv: String
secret: String
secretType: String
secretTypeDescription: String
secretStatus: String
image: String
imageCreatedAt: String
pkgCount: Int
dockerVer: String
os: String
binariesCount: Int
tag: String
reputation: String
sha256: String
size: String
pushedAt: String
source: String
sourceLink: String
ruleId: String
realMatch: String
excludedByAlert: Boolean
filePath: String
lockfile: String
accountId: String
snippetLineNumber: Int
language: String
daysOpen: String
isFixAvailable: Boolean
aggId: String
pkgName: String
installedVersion: String
fixedVersion: String
triggerPkgName: String
triggerPkgVersion: String
triggerPkgUpgradeVersion: String
dependencyType: String
branch: String
hashAggId: String
repo: String
repoCreator: String
lastCodeDate: String
lastAdminOperation: String
exclusionId: String
numberOfReposDomainAppear: Int
layer: String
baseImage: String
imageLink: String
registryName: String
project: String
resourceGroup: String
cloudResourceTags: String
location: String
locationLink: String
parameter: String
test: String
cvss: Float
evidence: String
request: String
response: String
dastUrl: String
method: String
parameterType: String
value: String
cluster: String
type: String
cloudType: String
k8sType: String
consoleLink: String
name: String
subscriptionId: String
stringifiedClusters: String
aggStatus: String
falsePositive: FalsePositive
cbomId: String
prDeatils: PullRequest
triage: Triage
runtimeStatus: String
eventCount: Int
pod: String
parentProcess: String
process: String
processPath: String
command: String
connection: String
eventArgs: String
eventFlags: String
}
```
### Fields
| Field | Description | Supported fields |
| ------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| originalSeverity `Int` | Original severity level before overrides | |
| oxSeverity `Int` | Severity according to the OX scoring system | |
| callBranch `[String]` | Branch call stack or hierarchy related to this aggregation | |
| linkToExternalProduct `String` | URL linking to an external product or service associated with this item | |
| stars `String` | Number of stars for the related repository or project | |
| forks `String` | Number of forks for the related repository or project | |
| downloads `String` | Number of downloads for the package or project | |
| vulBySeverity `String` | Summary of vulnerabilities categorized by their severity levels | |
| nameAndVer `String` | Combined string of the package or component name and its version | |
| sourceRepoName `String` | Name of the source repository where the item originated | |
| sourceRepoLink `String` | URL link to the source repository | |
| sourceCreationDate `String` | Creation date of the source repository or resource | |
| sourceLastModifyDate `String` | Last modification date of the source repository or resource | |
| destinationRepoName `String` | Name of the destination repository, if different from the source | |
| destinationRepoLink `String` | URL link to the destination repository | |
| destinationCreationDate `String` | Creation date of the destination repository | |
| destinationLastModifyDate `String` | Last modification date of the destination repository | |
| destinationRepoVisibility `String` | Visibility status of the destination repository | |
| reasons `String` | Reason(s) explaining or justifying this aggregation or issue | |
| \_id `String` | Unique identifier for this aggregated item | |
| url `String` | URL link associated with this aggregation or issue | |
| additionalToolData `String` | Additional data provided by external tools relevant to this aggregation | |
| events `String` | String representing events related to this aggregation | |
| allEvents `String` | String representing all events related to this aggregation | |
| pushType `String` | Type of push event | |
| sha `String` | Commit SHA hash relevant to this aggregation | |
| title `String` | Title or headline describing this aggregation or issue | |
| link `String` | URL link to the aggregation or issue detail page | |
| mergedBy `String` | Name of the user who merged a relevant pull request | |
| date `String` | Date related to the aggregation or event | |
| fileCount `Int` | Number of files involved in this aggregation or fix | |
| diffInDays `Int` | Difference in days between two relevant dates | |
| reviewers `String` | List of reviewers involved in the review process | |
| user `String` | Username or identifier of a user related to this aggregation | |
| userLink `String` | URL link to the user's profile | |
| userAvatar `String` | URL or base64-encoded string of the user's avatar image | |
| devOperation `String` | Developer operation description related to this aggregation | |
| devOperationDate `String` | Date of the developer operation | |
| adminOperation `String` | Administrator operation description | |
| adminOperationDate `String` | Date of the administrator operation | |
| reviewOperation `String` | Code review operation description | |
| reviewOperationDate `String` | Date of the review operation | |
| orgRole `String` | Role of the user within the organization | |
| earliestActivityDate `String` | Earliest activity date recorded for this aggregation or related user | |
| repoPermissions `String` | Permissions assigned to the user for the repository | |
| adminLocation `String` | Location of the administrator or responsible party | |
| email `String` | Email address of the user or responsible person | |
| pullRequestsCount `Int` | Count of pull requests related to this aggregation or repository | |
| diffFromNowToCreatedAtInDays `Int` | Number of days difference from the current date to the creation date | |
| username `String` | Username of the related user | |
| accessLevel `String` | Access level of the user | |
| createdAt `String` | Creation date of the aggregation or related resource | |
| lastAccess `String` | Last access date of the user or resource | |
| fileName `String` | Name of the file involved in the issue or aggregation | |
| fileUri `String` | URI or path to the file in the repository | |
| startLine `Int` | Starting line number of the relevant snippet or match in the file | |
| endLine `Int` | Ending line number of the relevant snippet or match in the file | |
| match `String` | Text match that triggered the aggregation or issue | |
| snippet `String` | Snippet of code or text relevant to the issue or aggregation | |
| commitLink `String` | URL to the commit that is relevant to this aggregation | |
| commitBy `String` | Username or identifier of the person who made the commit | |
| changeAuthorName `String` | Author of the PR/MR/Push that introduced the change | |
| mergeDate `String` | Date when the commit was merged | |
| dateCommitPushed `String` | Date when the commit was pushed | |
| pullRequestNumber `String` | Pull request number | |
| pullRequestLink `String` | Pull request link | |
| codeOwners `[String]` | Code owners of the repository | |
| region `String` | Geographic or logical region related to the issue or aggregation | |
| eduVideoLink `String` | Link to educational video related to this issue or concept | |
| resource `String` | Name or identifier of the resource involved | |
| service `String` | Name of the service involved | |
| accountName `String` | Account name related to the aggregation or resource | |
| cloudEnv `String` | Cloud environment or provider | |
| secret `String` | Secret or sensitive data involved or detected | |
| secretType `String` | Type or classification of the secret | |
| secretTypeDescription `String` | Description of the secret type | |
| secretStatus `String` | Secret status (e.g., active, inactive, n/a) | |
| image `String` | Name of the container image involved | |
| imageCreatedAt `String` | Creation date of the container image | |
| pkgCount `Int` | Count of packages in the image or resource | |
| dockerVer `String` | Version of Docker used | |
| os `String` | Operating system name or version | |
| binariesCount `Int` | Count of binaries found or involved | |
| tag `String` | Tag associated with the image or resource | |
| reputation `String` | Reputation or trust score associated with the resource or entity | |
| sha256 `String` | SHA256 checksum or hash of a file or image | |
| size `String` | Size of the file or resource | |
| pushedAt `String` | Date when the resource was last pushed or updated | |
| source `String` | Source system or origin name | |
| sourceLink `String` | Link to the source system or origin | |
| ruleId `String` | Rule or policy identifier related to this aggregation | |
| realMatch `String` | Real matched value or string after processing | |
| excludedByAlert `Boolean` | Indicates if this aggregation was excluded by an alert rule | |
| filePath `String` | File path relevant to the aggregation or issue | |
| lockfile `String` | Name of the lockfile involved | |
| accountId `String` | Account identifier related to the aggregation or resource | |
| snippetLineNumber `Int` | Line number of the snippet match | |
| language `String` | Programming language of the file or resource | |
| daysOpen `String` | Number of days the issue or aggregation has been open | |
| isFixAvailable `Boolean` | Flag indicating if a fix is available for this issue | |
| aggId `String` | Aggregation identifier (hash or unique string) | |
| pkgName `String` | Package or component name related to the issue | |
| installedVersion `String` | Installed version of the package or component | |
| fixedVersion `String` | Version where the issue is fixed | |
| triggerPkgName `String` | Name of the package that triggered the vulnerability or issue | |
| triggerPkgVersion `String` | Version of the triggering package | |
| triggerPkgUpgradeVersion `String` | Suggested upgrade version for the triggering package | |
| dependencyType `String` | Type of dependency | |
| branch `String` | Branch name related to this aggregation or issue | |
| hashAggId `String` | Hashed aggregation identifier | |
| repo `String` | Repository name involved in this aggregation | |
| repoCreator `String` | Creator or owner of the repository | |
| lastCodeDate `String` | Date of the last code commit or modification | |
| lastAdminOperation `String` | Last administrative operation recorded | |
| exclusionId `String` | Identifier of exclusion rule applied | |
| numberOfReposDomainAppear `Int` | Number of repositories within the domain where this issue or package appears | |
| layer `String` | Layer information, often used for container image layers | |
| baseImage `String` | Base image name used in containerization | |
| imageLink `String` | Link to the container image in a registry or repository | |
| registryName `String` | Name of the container registry hosting the image | |
| project `String` | Project name or identifier related to the aggregation | |
| resourceGroup `String` | Resource group or logical grouping of cloud resources | |
| cloudResourceTags `String` | Stringified list of cloud resource tags | |
| location `String` | Geographic or cloud location associated with the resource | |
| locationLink `String` | Link to the geographic or cloud location | |
| parameter `String` | Additional parameter used for filtering or identification | |
| test `String` | Test field, possibly for experimental or temporary data | |
| cvss `Float` | CVSS (Common Vulnerability Scoring System) score indicating vulnerability severity | |
| evidence `String` | Evidence or proof related to the issue or aggregation | |
| request `String` | Request of the issue | |
| response `String` | Response of the issue | |
| dastUrl `String` | DAST URL of the issue | |
| method `String` | Method of the request | |
| parameterType `String` | Type of the parameter | |
| value `String` | Value of the parameter | |
| cluster `String` | Cluster name in Kubernetes or cloud infrastructure | |
| type `String` | Type of resource or entity involved | |
| cloudType `String` | Cloud provider or cloud environment type | |
| k8sType `String` | Kubernetes resource type | |
| consoleLink `String` | Link to the cloud console or dashboard | |
| name `String` | Generic name for the aggregation or resource | |
| subscriptionId `String` | Subscription ID related to the cloud account | |
| stringifiedClusters `String` | Stringified representation of clusters involved | |
| aggStatus `String` | | |
| falsePositive [`FalsePositive`](/api-documentation/api-reference/api--issue/types/objects/false-positive.md) | Detailed information about how the issue has been marked as a false positive | isFalsePositive Boolean
comment String
reportedBy String
reportedAt Date
isCanceled Boolean
cancelComment String
canceledBy String
canceledAt Date
commentWhenCanceled String
|
| cbomId `String` | Id of CBOM asset | |
| prDeatils [`PullRequest`](/api-documentation/api-reference/api--issue/types/objects/pull-request.md) | Details for PR opened for the aggregation | sourceControlType String
issueId String
appId String
repo String
prId String
prURL String
prBranchName String
commitMessage String
commiter String
comment String
date Date
prTitle String
prBody String
prStatus String
prApprover String
prReviewer String
prMergeTime Date
|
| triage [`Triage`](/api-documentation/api-reference/api--issue/types/objects/triage.md) | Triage information | triageStatus String
createdBy String
createdAt Date
|
| runtimeStatus `String` | Runtime status of the artifact (e.g. Running) | |
| eventCount `Int` | Frequency count for an aggregated runtime-event row, expressing how many raw events collapsed into a single entry. | |
| pod `String` | Kubernetes pod name (typically masked) when the event originated in a pod. | |
| parentProcess `String` | Parent process name (proc.pname) of the most recently observed event. | |
| process `String` | Process name (proc.name): the short binary name. | |
| processPath `String` | Full executable path (proc.exepath) of the most recently observed event. | |
| command `String` | Truncated process command line of the most recently observed event in this aggregated row. | |
| connection `String` | Network endpoint string when the event involved a socket. Empty for non-network events. | |
| eventArgs `String` | Raw syscall argument string (evt.args) for syscall-tracking rules. | |
| eventFlags `String` | Bitmask flags string (evt.arg.flags or evt.arg.mode) such as EXE\_WRITABLE or O\_RDONLY. | |
### References
#### Fields with this object:
* [{} Issue.latestCommit](/api-documentation/api-reference/api--issue/types/objects/issue.md)
* [{} AdditionalTab.aggItems](/api-documentation/api-reference/api--issue/types/objects/additional-tab.md)
* [{} IAggregations.items](/api-documentation/api-reference/api--issue/types/objects/i-aggregations.md)
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://docs.ox.security/api-documentation/api-reference/api--issue/types/objects/agg-item.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.