Qualys Enterprise TruRisk™ Platform 2.4.1 (CAR) API Notification 2
A new release of Qualys Enterprise TruRisk™ Platform 2.4.1 (CAR) includes updated APIs and a new API, which is targeted for release in February 2025. The specific day will differ depending on the platform. See platform release dates on the Qualys Status page. This API notification provides an early preview into the upcoming API changes, allowing you to identify use cases that can leverage these APIs.
What’s New?
In this release, we have updated the Scripts APIs with additional parameters, enabling you to define and create parameterized scripts more effectively. Furthermore, we have enhanced our configuration-based APIs by introducing new parameters to improve user activity tracking and logging. Additionally, we have implemented a new API that allows for the deletion of invalid asset jobs.
New Parameters in Scripts APIs
In this release, we have introduced new parameters hasParameters, params.key and params.value in the Scripts APIs. The hasParameters parameter is optional, however params.key and params.value parameters are mandatory if you set hasParameters to true. Below listed APIs are updated to support these parameters.
Updated API: Update Scripts API
PATCH /sm/v4/script/{Scriptid}
DTD or XSD changes: Not Applicable
Updated API: Create Scripts API
POST /sm/v4/script – Deprecation timeline: June 2025
POST /sm/v5/script – New endpoint
DTD or XSD changes: Not Applicable
New Input Parameters in Configuration-based APIs
In this release, we have added two new input parameters id and name to the below listed APIs. Both of these parameters are optional. The id parameter can be used to provide the ID of the user, whereas name parameter can be used to provide the name of the user.
Updated API: Add Assets to List of Blocked Assets API
POST /sm/v1/block-assets
DTD or XSD changes: Not Applicable
Updated API: Delete Blocked Assets API
POST /sm/v1/block-assets/delete
DTD or XSD changes: Not Applicable
Updated API: Add Tags to the List of Blocked Tags API
POST /sm/v1/block-tags
DTD or XSD changes: Not Applicable
Updated API: Delete Blocked Tags API
POST /sm/v1/block-tags/delete
DTD or XSD changes: Not Applicable
Updated API: Add Assets to List of Lab Assets API
POST /sm/v1/lab-assets
DTD or XSD changes: Not Applicable
Updated API: Delete Lab Assets API
POST /sm/v1/lab-assets/delete
DTD or XSD changes: Not Applicable
New API: Delete Invalid Asset Jobs
In this release, we have introduced a new feature that allows you to delete asset jobs with the MANIFEST_EXPIRED and MANIFEST_ASSIGNMENT_FAILED statuses. These jobs no longer move to the next status. To support this feature via API, we have added a new Delete Invalid Asset Jobs API.
POST /sm/v1/assetjobs/delete
DTD or XSD changes: Not Applicable
For more details, please refer the release note here: https://docs.qualys.com/en/car/release-notes/car/release_2_4_1_api.htm
