API reference | Infiniview Docs

Note

Authentication uses the dashboard session unless noted otherwise. The GitHub webhook receiver verifies signatures from GitHub and rejects anything else.

Health

GET/api/health

GET/api/health/readiness

GitHub

OAuth handshake, repo discovery, and the signed webhook receiver.

GET/api/github/connect

GET/api/github/callback

GET/api/github/disconnect

GET/api/github/repos

POST/api/github/webhook

Reviews

Manage reviews and their related views. DELETE archives by default; dev mode can hard-delete.

GET/api/reviews

POST/api/reviews

GET/api/reviews/{id}

PATCH/api/reviews/{id}

DELETE/api/reviews/{id}archive (default) or hard delete (dev)

GET/api/reviews/{id}/story-insights

GET/api/reviews/{id}/readiness

POST/api/reviews/{id}/rerun

Scan runs

GET/api/scan-runs

GET/api/scan-runs/{id}

DELETE/api/scan-runs/{id}

GET/api/scan-runs/{id}/progress

GET/api/scan-runs/{id}/live

GET/api/scan-runs/{id}/csv

GET/api/scan-runs/{id}/compare

GET/api/scan-runs/{id}/trust

Findings

GET/api/security-findings

GET/api/security-findings/{id}

PATCH/api/security-findings/{id}

GET/api/security-findings/{id}/replay

GET/api/security-findings/{id}/bundle

GET/api/security-findings/export

Configuration

GET/api/scan-config

PUT/api/scan-config

POST/api/validate-infiniview-yml

GET/api/settings

PUT/api/settings

GET/api/repo-secrets

POST/api/repo-secrets

DELETE/api/repo-secrets/{id}

Suppressions

GET/api/finding-suppressions

POST/api/finding-suppressions

DELETE/api/finding-suppressions/{id}

Billing

POST/api/billing/checkout-session

GET/api/billing/status

POST/api/billing/webhook