Hi  👋 , @Tim J (Veracode PM) (Veracode)​  here. I’m pleased to announce the availability of new REST APIs for managing sandboxes, proposing and managing mitigations, and getting more information about results. These new APIs help to reduce the need to work with XML when automating common Veracode tasks. Below is a list of XML API endpoints and their new REST API equivalents.

createsandbox.do

POST /applications/<app_id>/sandboxes

NEW: Can specify multiple custom field values at creation time

deletesandbox.do

DELETE /applications/<app_id>/sandboxes/<sandbox_id>

updatesandbox.do

PUT /applications/<app_id>/sandboxes/<sandbox_id>

NEW: Can update multiple custom field values at once.

promotesandbox.do

POST /applications/<app_id>/sandboxes/<sandbox_id>/promote

getcallstacks.do

/applications/<app_id>/findings/<issue_id>/static_flaw_info

Contains data path information for the specified finding.

getdynamicflaws.do

/applications/<app_id>/findings/<issue_id>/dynamic_flaw_info

Contains request/response information for the specified finding.

summaryreport.do

/applications/<app_id>/summary_report

Summarizes the findings for the application profile, including SCA findings.

For more information about these APIs, see the Help Center (Sandbox APIs, Annotations API, Static Finding Data Path, Dynamic Flaw Info, Summary Report). Please note that we will be adding additional documentation about these APIs, including "how to" examples, over the next few weeks. You can also see some sample Python code for calling these apis in this Python library.

Please ask any questions about these APIs here!