Qualys Enterprise TruRisk™ Platform (Container Security Release 1.44) API Notification

Whats New

A new release of Qualys Enterprise TruRisk™ Platform (Container Security Release 1.44 API), scheduled in July 2026, includes updates to existing and new APIs. This API notification highlights recently released changes, enabling you to identify use cases that can benefit from the updated APIs. 

What’s New 

The CS 1.44 API release delivers significant improvements in the sensor profile, vulnerability reports, registry scan status, secret detector, compliance posture of container and new additions in asset types such as serverless functions (AWS Lambda) and code repository scan.  

Note that in all CS APIs mentioned in this document, DTD or XSD changes are not applicable. 

Enhancement in Sensor Profile

Fetch Details of a Sensor Profile

Updated API: Fetch Details of a Sensor Profile
Endpoint: GET /csapi/v1.3/sensorProfile/{sensorProfileId}

Create a Sensor Profile

Updated API: Create a Sensor Profile
Endpoint: POST /csapi/v1.3/sensorProfile

Update a Sensor Profile

Updated API: Update a Sensor Profile
Endpoint: PUT /csapi/v1.3/sensorProfile/{sensorProfileId}

Enhancements in Vulnerability Reports 

Fetch a List of Reports

Updated API: Fetch a List of Reports
Endpoint: GET /csapi/v1.3/reports

Create a Report Request

Updated API: Create a Report Request
Endpoint: POST /csapi/v1.3/reports

Create a Report Schedule

Updated API: Create a Report Schedule 
Endpoint: POST /csapi/v1.3/reports/schedule

New Asset Type – Serverless Function (AWS Lambda Scan)

Fetch a List of Serverless Function

New API: Fetch a List of Serverless Function
Endpoint: GET /csapi/v1.3/serverless-functions

Fetch Details of a Serverless Function

New API: Fetch Details of a Serverless Function
Endpoint: GET /csapi/v1.3/serverless-functions/{functionUuid}

Fetch Software Details of Serverless Function

New API: Fetch Software Details of Serverless Function
Endpoint: GET /csapi/v1.3/serverless-functions/{functionUuid}/software

Fetch Vulnerability stats in Serverless Function

New API: Fetch Vulnerability stats in Serverless Function
Endpoint: GET /csapi/v1.3/serverless-functions/{functionUuid}/vuln/stats

Fetch a List of Serverless Functions in Bulk

New API: Fetch a List of Serverless Functions in Bulk
Endpoint: GET /csapi/v1.3/serverless-functions/list

New Asset Type – Code Repository Scan

Fetch a List of Code Repository Scan

New API: Fetch a List of Code Repository Scan
Endpoint: GET /csapi/v1.3/code

Fetch Details of a Code Repository Scan

New API: Fetch Details of a Code Repository Scan
Endpoint: GET /csapi/v1.3/code/{uuid}

Fetch Software Details of Code Repository Scan

New API: Fetch Software Details of Code Repository Scan
Endpoint: GET /csapi/v1.3/code/{uuid}/software

Fetch a List of Vulnerabilities in Code Repository Scan

New API: Fetch a List of Vulnerabilities in Code Repository Scan
Endpoint: GET /csapi/v1.3/code/{codeId}/vuln/stats

Fetch a List of Code Repository Scan in Bulk

New API: Fetch a List of Code Repository Scan in Bulk
Endpoint: GET /csapi/v1.3/code/list

Fetch Compliance Details of Code Repository Scan

New API: Fetch Compliance Details of Code Repository Scan
Endpoint: GET /csapi/v1.3/code/{codeId}/compliance

Enhancement in Registry Scan Status

Fetch a List of Images to be Scanned for a Registry Schedule Job

Updated API: Fetch a List of Images to be Scanned for a Registry Schedule Job 
Endpoint: GET /csapi/v1.3/registry/{registryId}/schedule/{scheduleId}/executions/{jobId}/images

Fetch a List of Executions Created for a Registry Schedule

Updated API: Fetch a List of Executions Created for a Registry Schedule
Endpoint: GET /csapi/v1.3/registry/{registryId}/schedule/{scheduleId}/executions 

Enhancement in Secret Detector

Exclude Block-

Fetch a List of Exclude Blocks

New API: Fetch a List of Exclude Blocks
Endpoint: GET /csapi/v1.3/secretExcludeBlock

Fetch Details of an Exclude Block

New API: Fetch Details of an Exclude Block
Endpoint: GET /csapi/v1.3/secretExcludeBlock/{ruleId}

Create an Exclude Block

New API: Create an Exclude Block
Endpoint: POST /csapi/v1.3/secretExcludeBlock/create

Update an Exclude Block

New API: Update an Exclude Block
Endpoint: PUT /csapi/v1.3/secretExcludeBlock/{ruleId}

Delete Exclude Block

New API: Delete Exclude Block
Endpoint: DELETE /csapi/v1.3/secretExcludeBlock/{ruleId}

Allow Rules-

Fetch a List of Allow Rules

New API: Fetch a List of Allow Rules
Endpoint: GET /csapi/v1.3/secretAllowRule

Fetch Details of an Allow Rule

New API: Fetch Details of an Allow Rule
Endpoint: GET /csapi/v1.3/secretAllowRule/{ruleId}

Create an Allow Rule

New API: Create an Allow Rule
Endpoint: POST /csapi/v1.3/secretAllowRule/create

Update an Allow Rule

New API: Update an Allow Rule
Endpoint: PUT /csapi/v1.3/secretAllowRule/{ruleId}

Delete Allow Rule

New API: Delete Allow Rule
Endpoint: DELETE /csapi/v1.3/secretAllowRule/{ruleId}

Compliance Posture for a Container

Fetch Compliance Posture for a Container

Updated API: Fetch Compliance Posture for a Container
Endpoint: GET /csapi/v1.3/containers/{containerSha}/compliance

Please refer to the detailed release notes here:   https://docs.qualys.com/en/cs/release-notes/container_security/release_1_44_api.htm  