Scanning API

Use these endpoints to trigger repository static analysis and cloud infrastructure scans. Use the X-CLOUDGENI-API-KEY header for all examples here.

Repository Static Analysis

Create a Checkov-backed static analysis run for a repository:

curl --fail --silent --show-error \
  -X POST \
  -H "Content-Type: application/json" \
  -H "X-CLOUDGENI-API-KEY: $CLOUDGENI_API_KEY" \
  "$CLOUDGENI_API_URL/api/v1/organizations/$CLOUDGENI_ORG_ID/workspaces/$CLOUDGENI_WORKSPACE_ID/repositories/$CLOUDGENI_REPO_ID/static-analysis" \
  -d '{
    "analysisEngine": "checkov",
    "excludedPaths": []
  }'

Fetch the current active analysis for the repository:

curl --fail --silent --show-error \
  -H "X-CLOUDGENI-API-KEY: $CLOUDGENI_API_KEY" \
  "$CLOUDGENI_API_URL/api/v1/organizations/$CLOUDGENI_ORG_ID/workspaces/$CLOUDGENI_WORKSPACE_ID/repositories/$CLOUDGENI_REPO_ID/static-analysis?current=true"

Fetch findings for a specific analysis:

curl --fail --silent --show-error \
  -H "X-CLOUDGENI-API-KEY: $CLOUDGENI_API_KEY" \
  "$CLOUDGENI_API_URL/api/v1/organizations/$CLOUDGENI_ORG_ID/workspaces/$CLOUDGENI_WORKSPACE_ID/repositories/$CLOUDGENI_REPO_ID/static-analysis/$CLOUDGENI_ANALYSIS_ID/findings?limit=50"

Repository IaC Scans

Create an IaC repository scan:

curl --fail --silent --show-error \
  -X POST \
  -H "Content-Type: application/json" \
  -H "X-CLOUDGENI-API-KEY: $CLOUDGENI_API_KEY" \
  "$CLOUDGENI_API_URL/api/v1/organizations/$CLOUDGENI_ORG_ID/workspaces/$CLOUDGENI_WORKSPACE_ID/repositories/$CLOUDGENI_REPO_ID/iac-scans" \
  -d '{}'

Use this when you want the repository scan flow exposed by the iac-scans routes rather than the Checkov-only static analysis flow.

Cloud Infra Scans

Create a cloud scan against an existing cloud integration:

curl --fail --silent --show-error \
  -X POST \
  -H "Content-Type: application/json" \
  -H "X-CLOUDGENI-API-KEY: $CLOUDGENI_API_KEY" \
  "$CLOUDGENI_API_URL/api/v1/organizations/$CLOUDGENI_ORG_ID/workspaces/$CLOUDGENI_WORKSPACE_ID/cloud/$CLOUDGENI_INTEGRATION_ID/prowler-ocsf/infra-scans" \
  -d '{}'

The analysisEngine segment is part of the route. Supported values include:

prowler-ocsf
aws-security-hub
azure-defender

You can also pass optional cloud-scan fields such as credentialId and regions when the route supports them.

Cloud Scan Findings

Fetch findings for a specific cloud scan:

curl --fail --silent --show-error \
  -H "X-CLOUDGENI-API-KEY: $CLOUDGENI_API_KEY" \
  "$CLOUDGENI_API_URL/api/v1/organizations/$CLOUDGENI_ORG_ID/workspaces/$CLOUDGENI_WORKSPACE_ID/cloud/$CLOUDGENI_INTEGRATION_ID/prowler-ocsf/infra-scans/$CLOUDGENI_SCAN_ID/findings?limit=100"

You can filter, page, search, and sort cloud findings with query parameters such as:

limit
offset
search
severity
status
frameworks
summaryStatusCategories
resourceType
resourceId
sortBy
sortOrder

Array filters accept either repeated query parameters or comma-separated values. Framework filters match a finding when it has at least one mapping for any requested framework. Add includeSummary=true to return severity totals for the same filtered result set; summaryStatusCategories can further limit that summary to FAILED, SUPPRESSED, or PASSED. For example, this request returns open high- or critical-severity findings mapped to SOC 2 or ISO 27001:

?limit=100&severity=CRITICAL,HIGH&status=OPEN&frameworks=SOC2,ISO27001-2022&sortBy=severity&sortOrder=desc

CLI Equivalents

If you would rather not call raw HTTP:

cloudgeni repo static-analysis create --org <org> --repo <repo>
cloudgeni repo iac-scan create --org <org> --repo <repo>

Pipeline Setup

The API endpoints above are available for custom automation. For Cloudgeni-managed repository pipelines, use the IaC Pipeline Agent to create and test SCAN and VALIDATE workflows.

Overview

Endpoints

Scanning API

Scanning API

Repository Static Analysis

Repository IaC Scans

Cloud Infra Scans

Cloud Scan Findings

CLI Equivalents

Pipeline Setup

​Scanning API

​Repository Static Analysis

​Repository IaC Scans

​Cloud Infra Scans

​Cloud Scan Findings

​CLI Equivalents

​Pipeline Setup

Scanning API

Repository Static Analysis

Repository IaC Scans

Cloud Infra Scans

Cloud Scan Findings

CLI Equivalents

Pipeline Setup