Veracode Base CampDQuince102705 (Community Member) asked a question.

Is it possible to pass in a parameter to the API spec an API dynamic scan?

Right now, the file_id parameter gets a dynamic value and causes the validation to fail. If we hardcode to a known value, it works. Is it possible to pass in a parameter to the API spec an API dynamic scan to replace the file_id parameter?

Ty

  "/{file_id}/actions": {

   "get": {

    "summary": "GetActionsByFile",

    "description": "Gets actions on a file.",

    "operationId": "21825749",

    "parameters": [

     {

      "name": "file_id",

      "in": "path",

      "required": true,

      "schema": { "type": "string" }

     }


  • SamHouston (Veracode)

    Hi @DQuince102705 (Community Member)​ - Updating the API spec before each scan with the required hard coded value OR using a postman collection that contains a flow that fetches the value for file_id and reuses the value in subsequent calls. Not a postman expert myself, but there should be plenty of generic postman documentation out there to check if that's a possibility.

Topics (4)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.