{ "openapi": "3.0.1", "info": { "title": "CSAF Advisory Extractor", "description": "Point at ANY OASIS CSAF 2.0 / VEX provider or aggregator (Red Hat, Siemens, BSI/CERT-Bund, Cisco...) and pull structured security advisories. Handles both ROLIE feeds and directory distributions; flattens each doc to advisory x vulnerability x product with CVSS and remediation.", "version": "0.1", "x-build-id": "ELBoU8IjfRySMPKo0" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/datamule~csaf-advisory-extractor/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-datamule-csaf-advisory-extractor", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/datamule~csaf-advisory-extractor/runs": { "post": { "operationId": "runs-sync-datamule-csaf-advisory-extractor", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/datamule~csaf-advisory-extractor/run-sync": { "post": { "operationId": "run-sync-datamule-csaf-advisory-extractor", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "required": [ "startUrl" ], "properties": { "startUrl": { "title": "Provider / aggregator URL", "type": "string", "description": "A CSAF provider domain (resolves '/.well-known/csaf/provider-metadata.json'), a direct provider-metadata.json URL, or an aggregator.json URL. Examples: https://wid.cert-bund.de (BSI/CERT-Bund, ROLIE feeds) · https://access.redhat.com/security/data/csaf/v2/provider-metadata.json (Red Hat, directory) · https://wid.cert-bund.de/.well-known/csaf-aggregator/aggregator.json (aggregator/lister). Redirects are followed." }, "mode": { "title": "Mode", "enum": [ "advisories", "discover" ], "type": "string", "description": "'advisories' fetches the CSAF documents and flattens each to one row per (advisory x vulnerability x affected product). 'discover' emits the provider/feed inventory (one row per distribution feed, or per listed provider for an aggregator) without fetching documents.", "default": "advisories" }, "since": { "title": "Updated since (optional)", "type": "string", "description": "Only advisories updated on/after this date/time (ISO-8601, e.g. '2026-01-01' or '2026-01-01T00:00:00Z'). Applied via the ROLIE entry 'updated' timestamp or the directory 'changes.csv' timestamp. Leave empty for the newest advisories up to Max records." }, "maxRecords": { "title": "Max records", "minimum": 1, "type": "integer", "description": "Maximum number of output rows (advisory x vulnerability x product rows in 'advisories' mode; inventory rows in 'discover' mode). Bounds large providers like Red Hat.", "default": 1000 }, "tlpFilter": { "title": "TLP filter", "enum": [ "white_clear", "all" ], "type": "string", "description": "Which advisories to include by TLP marking. 'white_clear' (default) processes only freely-redistributable TLP:WHITE/CLEAR advisories and skips ROLIE feeds marked otherwise. 'all' processes every feed/document regardless of TLP — use ONLY for a provider you are authorised to redistribute in full.", "default": "white_clear" }, "maxProviders": { "title": "Max providers (aggregator only)", "minimum": 1, "type": "integer", "description": "When startUrl is an aggregator (category 'lister'), the maximum number of listed providers to enumerate in 'advisories' mode.", "default": 10 }, "userAgent": { "title": "User-Agent (optional)", "type": "string", "description": "Override the default User-Agent header sent to CSAF servers." }, "timeoutSecs": { "title": "Request timeout (seconds)", "minimum": 5, "type": "integer", "description": "Per-request timeout in seconds. CSAF documents and ROLIE feeds can be large.", "default": 180 } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } } } } } } } } }