{
  "openapi": "3.0.1",
  "info": {
    "title": "Software Security Intelligence - CVE, KEV & GitHub Advisories",
    "description": "One row per vulnerability, joined across the NVD CVE 2.0 API, the CISA Known Exploited Vulnerabilities catalogue and GitHub Security Advisories: CVSS, CWE, affected products and version ranges, package fix versions, and whether the flaw is exploited in the wild. No API key.",
    "version": "0.1",
    "x-build-id": "rS5FVt4m5MoFlBfBY"
  },
  "servers": [
    {
      "url": "https://api.apify.com/v2"
    }
  ],
  "paths": {
    "/acts/darknezz~software-security-intelligence/run-sync-get-dataset-items": {
      "post": {
        "operationId": "run-sync-get-dataset-items-darknezz-software-security-intelligence",
        "x-openai-isConsequential": false,
        "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.",
        "tags": [
          "Run Actor"
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/inputSchema"
              }
            }
          }
        },
        "parameters": [
          {
            "name": "token",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "Enter your Apify token here"
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          }
        }
      }
    },
    "/acts/darknezz~software-security-intelligence/runs": {
      "post": {
        "operationId": "runs-sync-darknezz-software-security-intelligence",
        "x-openai-isConsequential": false,
        "summary": "Executes an Actor and returns information about the initiated run in response.",
        "tags": [
          "Run Actor"
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/inputSchema"
              }
            }
          }
        },
        "parameters": [
          {
            "name": "token",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "Enter your Apify token here"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/runsResponseSchema"
                }
              }
            }
          }
        }
      }
    },
    "/acts/darknezz~software-security-intelligence/run-sync": {
      "post": {
        "operationId": "run-sync-darknezz-software-security-intelligence",
        "x-openai-isConsequential": false,
        "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.",
        "tags": [
          "Run Actor"
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/inputSchema"
              }
            }
          }
        },
        "parameters": [
          {
            "name": "token",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "Enter your Apify token here"
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          }
        }
      }
    }
  },
  "components": {
    "schemas": {
      "inputSchema": {
        "type": "object",
        "properties": {
          "products": {
            "title": "Products / vendors / software",
            "type": "array",
            "description": "Keywords to sweep the NVD CVE API with, e.g. \"openssl\", \"apache log4j\", \"fortinet\". Each keyword becomes one CVE search inside the publishedSince window.",
            "items": {
              "type": "string"
            },
            "default": [
              "openssl"
            ]
          },
          "packages": {
            "title": "Packages (ecosystem:name)",
            "type": "array",
            "description": "Software packages to check against the GitHub Advisory Database, written as ecosystem:name, e.g. \"npm:lodash\", \"pip:requests\", \"maven:org.apache.logging.log4j:log4j-core\". Append @version (e.g. \"npm:lodash@4.17.18\") to ask the sharper question \"am I affected at this version?\".",
            "items": {
              "type": "string"
            },
            "default": [
              "npm:lodash"
            ]
          },
          "cveIds": {
            "title": "CVE ids",
            "type": "array",
            "description": "Exact CVE identifiers to fetch directly, e.g. [\"CVE-2021-44228\"]. Exact lookups ignore the publishedSince window — you asked for that CVE.",
            "items": {
              "type": "string"
            },
            "default": []
          },
          "onlyKnownExploited": {
            "title": "Only known-exploited (CISA KEV)",
            "type": "boolean",
            "description": "Keep only vulnerabilities in CISA's Known Exploited Vulnerabilities catalogue — the ones confirmed exploited in the wild. Applied to the NVD query itself (hasKev) and again after the join.",
            "default": false
          },
          "publishedSince": {
            "title": "Published since",
            "type": "string",
            "description": "Freshness window for product sweeps: a relative window (\"30d\", \"12h\", \"2w\", \"1m\") or an ISO date (\"2026-08-01\"). \"all\" disables the window. Default 30d suits a scheduled monitor. Exact CVE lookups always ignore it.",
            "default": "30d"
          },
          "applyDateWindowToPackages": {
            "title": "Apply the window to package lookups",
            "type": "boolean",
            "description": "When on, package lookups are also limited to advisories published inside the publishedSince window — useful for a scheduled \"what changed since last run\" monitor. Off by default, so a package query returns its full advisory history (the \"does this dependency have known vulnerabilities?\" question).",
            "default": false
          },
          "severities": {
            "title": "Severity filter",
            "type": "array",
            "description": "Keep only these severities, e.g. [\"CRITICAL\", \"HIGH\"] (valid values: CRITICAL, HIGH, MEDIUM, LOW, UNKNOWN). Empty keeps every severity, including UNKNOWN — CVEs with no CVSS score are still real vulnerabilities.",
            "items": {
              "type": "string"
            },
            "default": []
          },
          "minCvssScore": {
            "title": "Minimum CVSS score",
            "minimum": 0,
            "maximum": 10,
            "type": "number",
            "description": "Drop advisories scoring below this. Records that carry no CVSS score at all are dropped too when this is above 0 — set it to 0 (default) to keep unanalysed CVEs.",
            "default": 0
          },
          "maxResultsPerQuery": {
            "title": "Max results per query",
            "minimum": 1,
            "maximum": 100,
            "type": "integer",
            "description": "NVD page size / maximum CVEs returned per product sweep, and the GitHub page size per package (max 100).",
            "default": 25
          },
          "includeGithubAdvisories": {
            "title": "Include GitHub Security Advisories",
            "type": "boolean",
            "description": "Look packages (and CVE ids) up in the GitHub Advisory Database. Turn off to run on NVD + CISA KEV alone — useful when you have already spent the keyless GitHub quota this hour.",
            "default": true
          },
          "includeUnreviewedAdvisories": {
            "title": "Include unreviewed GitHub advisories",
            "type": "boolean",
            "description": "GitHub advisories are 'reviewed' by default; unreviewed ones are machine-imported and their stated severity can disagree with their own CVSS vector. Turn this on to include them anyway.",
            "default": false
          },
          "includeWithdrawnAdvisories": {
            "title": "Include withdrawn advisories",
            "type": "boolean",
            "description": "Withdrawn (retracted upstream) advisories are dropped by default so a retraction is never published as live intelligence. Turn this on only for historical research.",
            "default": false
          },
          "nvdApiKey": {
            "title": "NVD API key (optional)",
            "type": "string",
            "description": "Optional. The NVD API works without a key, paced at 5 requests / 30 s; a free NVD key raises that to 50 / 30 s and makes wide multi-product sweeps much faster."
          },
          "githubToken": {
            "title": "GitHub token (optional)",
            "type": "string",
            "description": "Optional. Keyless GitHub API access is capped at 60 requests / hour per IP; any token raises it to 5,000 / hour. The run reports the remaining quota in its SUMMARY and degrades gracefully when it runs out."
          }
        }
      },
      "runsResponseSchema": {
        "type": "object",
        "properties": {
          "data": {
            "type": "object",
            "properties": {
              "id": {
                "type": "string"
              },
              "actId": {
                "type": "string"
              },
              "userId": {
                "type": "string"
              },
              "startedAt": {
                "type": "string",
                "format": "date-time",
                "example": "2025-01-08T00:00:00.000Z"
              },
              "finishedAt": {
                "type": "string",
                "format": "date-time",
                "example": "2025-01-08T00:00:00.000Z"
              },
              "status": {
                "type": "string",
                "example": "READY"
              },
              "meta": {
                "type": "object",
                "properties": {
                  "origin": {
                    "type": "string",
                    "example": "API"
                  },
                  "userAgent": {
                    "type": "string"
                  }
                }
              },
              "stats": {
                "type": "object",
                "properties": {
                  "inputBodyLen": {
                    "type": "integer",
                    "example": 2000
                  },
                  "rebootCount": {
                    "type": "integer",
                    "example": 0
                  },
                  "restartCount": {
                    "type": "integer",
                    "example": 0
                  },
                  "resurrectCount": {
                    "type": "integer",
                    "example": 0
                  },
                  "computeUnits": {
                    "type": "integer",
                    "example": 0
                  }
                }
              },
              "options": {
                "type": "object",
                "properties": {
                  "build": {
                    "type": "string",
                    "example": "latest"
                  },
                  "timeoutSecs": {
                    "type": "integer",
                    "example": 300
                  },
                  "memoryMbytes": {
                    "type": "integer",
                    "example": 1024
                  },
                  "diskMbytes": {
                    "type": "integer",
                    "example": 2048
                  }
                }
              },
              "buildId": {
                "type": "string"
              },
              "defaultKeyValueStoreId": {
                "type": "string"
              },
              "defaultDatasetId": {
                "type": "string"
              },
              "defaultRequestQueueId": {
                "type": "string"
              },
              "buildNumber": {
                "type": "string",
                "example": "1.0.0"
              },
              "containerUrl": {
                "type": "string"
              },
              "usage": {
                "type": "object",
                "properties": {
                  "ACTOR_COMPUTE_UNITS": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATASET_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATASET_WRITES": {
                    "type": "integer",
                    "example": 0
                  },
                  "KEY_VALUE_STORE_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "KEY_VALUE_STORE_WRITES": {
                    "type": "integer",
                    "example": 1
                  },
                  "KEY_VALUE_STORE_LISTS": {
                    "type": "integer",
                    "example": 0
                  },
                  "REQUEST_QUEUE_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "REQUEST_QUEUE_WRITES": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATA_TRANSFER_INTERNAL_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATA_TRANSFER_EXTERNAL_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "PROXY_RESIDENTIAL_TRANSFER_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "PROXY_SERPS": {
                    "type": "integer",
                    "example": 0
                  }
                }
              },
              "usageTotalUsd": {
                "type": "number",
                "example": 0.00005
              },
              "usageUsd": {
                "type": "object",
                "properties": {
                  "ACTOR_COMPUTE_UNITS": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATASET_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATASET_WRITES": {
                    "type": "integer",
                    "example": 0
                  },
                  "KEY_VALUE_STORE_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "KEY_VALUE_STORE_WRITES": {
                    "type": "number",
                    "example": 0.00005
                  },
                  "KEY_VALUE_STORE_LISTS": {
                    "type": "integer",
                    "example": 0
                  },
                  "REQUEST_QUEUE_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "REQUEST_QUEUE_WRITES": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATA_TRANSFER_INTERNAL_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATA_TRANSFER_EXTERNAL_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "PROXY_RESIDENTIAL_TRANSFER_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "PROXY_SERPS": {
                    "type": "integer",
                    "example": 0
                  }
                }
              }
            }
          }
        }
      }
    }
  }
}