As we reach the end of September 2024, ThreadFix version 3.x on-premises has officially reached its End-of-Life. Therefore, there is no longer support or updates for this version of the product. We have fully transitioned our product and development teams to focus ThreadFix SaaS and migrating all customers over from the on-premises versions. Our Customer Success and Support teams are here to help you in migrating to ThreadFix SaaS and maximizing the value you see from this improved offering from Coalfire. This is the next phase of ThreadFix and our team is looking forward to continuing to support you on this journey.
Update Application 3.X - API
/rest/{version}/applications/{appId}/update
Descriptor | Value |
---|---|
HTTP Method | PUT |
Description | Updates the name of an application. |
Required Permission | Manage Applications |
Version Introduced | 2.3.0 |
Changes in 2.4.0 | Added the repositoryType parameter, which is required if you use repositoryUrl. This change was also applied to the 2.3 version of the call. |
Changes in 2.5.0.2 | Added the filterSet parameter, which allows you to restrict Fortify Scans coming into the application. This parameter is usable with all versions of the call. |
Changes in 2.5.3 | Added the team parameter, which allows you to move an application from one team to another. |
Changes in 2.7.1 | Added skipApplicationMerge parameter, which allows you to enable or disable the vulnerability merging for an application. |
Changes in 2.8.2 | Added ability to update the application description. |
Changes in 3.1.1 | Added the following parameters: testEnvironment, releaseFrequency, associatedUser, isInternal, ipAddresses |
Request Header Parameters
Parameter | Value | Required | Description |
---|---|---|---|
Accept | String | Yes | A value of ‘application/json’ must be provided. |
Request PUT Data Parameters
Parameter | Value | Required* | Description | Available Values |
---|---|---|---|---|
name | String | No | The new name to assign to the application. Limit 100 characters. | N/A |
url | String | No | The URL of where the application being assessed lives. | N/A |
uniqueId | String | No | A unique ID value to assign to the application. | N/A |
applicationCriticality | Integer | No | The severity level for the application, from 1 for Low to 4 for Critical. |
|
frameworkType | String | No | The web framework the app was built on. |
|
repositoryUrl | String | No | The repository where the source code for the app can be found. Requires repositoryType to be specified. | N/A |
repositoryType | String | Possibly | The type of repository your repositoryUrl refers to. Required if you specify a repositoryUrl. | “GIT”, “SVN” |
repositoryBranch | String | No | The git branch for the source code. | N/A |
repositoryUserName | String | No | The user name to use for git credentials. | N/A |
repositoryPassword | String | No | The password to use for git credentials. | N/A |
repositoryFolder | String | No | The root directory for the source code. | N/A |
filterSet | String | No | The name of the Filter Set from Fortify. If a Fortify scan does not have this as the default filter set, it cannot be uploaded to the application. | N/A |
team | Integer | No | The team ID to which you want to move an application. | N/A |
skipApplicationMerge | Boolean | No | Setting to enable or disable vulnerability merging for an application. | TRUE, FALSE |
description | String | No | The text to be included in the description field for the application. | |
testEnvironment | String | No | The name of the test environment associated with the application to be updated. | N/A |
releaseFrequency | String | No | Selectable option for how frequently the application updates. |
|
associatedUser | String | No | User name(s) associated with the application to be updated. | N/A |
isInternal | Boolean | No | Setting to enable or disable internal status for the application. | N/A |
ipAddresses | String | No | List of IP addresses associated with this application. Ex: 192.0.2.235,98.51.100.124,127.0.0.1 | N/A |
At least one parameter must be provided
Sample Call:
curl --insecure -H 'Accept: application/json' -H "Authorization: APIKEY {apiKey}" -X PUT --data "name=EditedApplication&url=http://localhost:8080&uniqueId=12345&applicationCriticality=4&frameworkType=DETECT&repositoryUrl=https://github.com/spring-projects/spring-petclinic.git&repositoryType=GIT&repositoryBranch=master&repositoryUserName=user&repositoryPassword=password&repositoryFolder=/&team=2&filterSet=Developer View" http://localhost:8080/threadfix/rest/v2.5.0.2/applications/1/update
Sample Output:
{
"message": "",
"success": true,
"responseCode": -1,
"object": "Fields updated successfully."
}
www.threadfix.it | www.coalfire.com
Copyright © 2024 Coalfire. All rights reserved.
This Information Security Policy is CoalFire - Public: Distribution of this material is not limited.