Using the GitLab GraphQL API for vulnerability reporting
Feb 2, 2022Fernando Diaz

Summary
This post details how to use the GitLab GraphQL API, specifically the `vulnerabilityCreate` mutation, to programmatically create vulnerabilities. It provides a step-by-step guide with `curl` commands, including obtaining a personal access token and project ID. Additionally, it outlines the process of building a custom vulnerability reporting application using GoLang and deploying it to Kubernetes via the GitLab Kubernetes Agent, demonstrating end-to-end integration of API capabilities.
More from the Bug Triage and Reporting trail
- Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting
- Manage vulnerability noise at scale with auto-dismiss policies
- How to transform compliance observation management with GitLab
- Self-service security alert handling with GitLab's UAM
- How GitLab measures Red Team impact: The adoption rate metric