Portfolio -> API Catalog Page

Overview

Riscosity's Portfolio → API Catalog page allows users to view and manage issues where their applications are sending data to vendors or communicating with them over unencrypted API calls.

 

Application	Select the Application to view issues for
Repo	Select a Repository or all Repositories to view issues for
Endpoint Security	Filter issues by Unresolved or Resolved
Select bulk action	Resolve issues Resolve issues based on your search parameters Tag issues with a Policy Untag issues from a Policy Assign a Vendor to issues
Apply to Selected SEs	Applies the bulk action to any selected issues
Download CSV	Exports a CSV file containing information all of the issues associated with the Application and its Repositories
Table Fields	Lists all of the issues. For each issue, view: Security Status URI Method Protocol Vendor Repo Tagged Policies SF Issues based on OWASP API Top 10 Tickets Click the +New button under Tickets to create a ticket in the user's ticketing system Note: In order to set up ticket defaults, a ticketing integration must be configured first. Click the Details to view: The Request Details of the API call  The Security Status of the issue, which contains additional details about the security risks Detection Info of where in the source code the API call was found Raw code block of the API call