Public API
The Gerion public API is an ingestion and reporting API built for machine-to-machine (M2M) integrations, such as the CLI and CI/CD pipelines. It is not a full REST API of the platform: it exposes only the following.
| Operation | Endpoint |
|---|---|
| M2M authentication | POST /auth/m2m/authenticate |
| Findings upload | POST /findings |
| Findings query | GET /reporting/findings |
Where to start
Section titled “Where to start”- M2M Authentication: how to exchange an API Key for a short-lived JWT.
- API Keys: how long-lived credentials are created and managed.
- Uploading Findings: how to send your scan findings to Gerion.