Qualys Enterprise TruRisk™ Platform (Container Security Release 1.43) API Notification

A new release of Qualys Enterprise TruRisk™ Platform (Container Security Release 1.43 API), scheduled in April 2026, includes updates to existing APIs. This API notification highlights recently released changes, enabling you to identify use cases that can benefit from the updated APIs. 

What’s New 

The CS 1.43 API release delivers significant improvements in the asset tagging, compliance posture of images, policy rule compliance, report template-Image Softwares, and dynamic tags.  

Note that in all CS APIs mentioned in this document, DTD or XSD changes are not applicable.

Compliance Scanning for Images 

Updated API: Fetch Compliance Posture for an Image 
Endpoint: GET /csapi/v1.3/images/{imageSha}/compliance 
DTD or XSD changes: Not Applicable

Vulnerability Details for an Image 

Updated API: Fetch Vulnerability Details for an Image 
Endpoint: GET /csapi/v1.3/images/{imageSha}/vul 

Enhanced Policy Rule Compliance 

Updated API: Fetch Details of a Centralized Policy 
Endpoint: GET /csapi/v1.3/centralizedPolicy/{policyId} 

Updated API: Create a Centralized Policy 
Endpoint: POST /csapi/v1.3/centralizedPolicy 

Updated API: Update a Centralized Policy 
Endpoint: PUT /csapi/v1.3/centralizedPolicy/{policyId} 

New Report Template – Image Softwares 

Updated API: Fetch a List of Reports in Your Account 
Endpoint: GET /csapi/v1.3/reports 

Updated API: Create a Report Request 
Endpoint: POST /csapi/v1.3/reports 

Updated API: Create a Report Schedule 
Endpoint: POST /csapi/v1.3/reports/schedule 

Updated API: Update an Active Report Schedule 
Endpoint: PUT /csapi/v1.3/reports/schedule/{reportingScheduleID} 

Improvement in Dynamic Tags

New API: Update Dynamic Tag 
Endpoint: PUT /csapi/v1.3/tag/update 

New API: Delete Tag 
Endpoint: DELETE /csapi/v1.3/tag/delete 

Please refer to the detailed release notes here: https://docs.qualys.com/en/cs/release-notes/container_security/release_1_43_api.htm