Ctrl K

List Issues

Published 4 days ago

List Wiz issues (risks) ordered by severity, with optional filters by severity, status and project.

Script wiz Verified

Use in Windmill

The script

Submitted by hugo989 Typescript (fetch-only)

Verified 5 days ago

All edits

Permalink

//native

/**
 * List Issues
 * List Wiz issues (risks) ordered by severity, with optional filters by severity, status and project. Returns a cursor-paginated page.
 */
export async function main(
  auth: RT.Wiz,
  severity:
    | ("INFORMATIONAL" | "LOW" | "MEDIUM" | "HIGH" | "CRITICAL")[]
    | undefined,
  status: ("OPEN" | "IN_PROGRESS" | "RESOLVED" | "REJECTED")[] | undefined,
  first: number | undefined,
  after: string | undefined
) {
  const tokenResponse = await fetch(
    auth.auth_url || "https://auth.app.wiz.io/oauth/token",
    {
      method: "POST",
      headers: { "Content-Type": "application/x-www-form-urlencoded" },
      body: new URLSearchParams({
        grant_type: "client_credentials",
        audience: auth.audience || "wiz-api",
        client_id: auth.client_id,
        client_secret: auth.client_secret,
      }),
    }
  )
  if (!tokenResponse.ok) {
    throw new Error(`${tokenResponse.status} ${await tokenResponse.text()}`)
  }
  const { access_token } = (await tokenResponse.json()) as {
    access_token: string
  }

  const filterBy: { [key: string]: any } = {}
  if (severity && severity.length > 0) filterBy.severity = severity
  if (status && status.length > 0) filterBy.status = status

  const query = `
query ListIssues($first: Int, $after: String, $filterBy: IssueFilters, $orderBy: IssueOrder) {
  issues: issuesV2(first: $first, after: $after, filterBy: $filterBy, orderBy: $orderBy) {
    totalCount
    pageInfo { hasNextPage endCursor }
    nodes {
      id
      type
      severity
      status
      createdAt
      updatedAt
      dueAt
      resolvedAt
      statusChangedAt
      resolutionReason
      sourceRule {
        __typename
        ... on Control { id name description }
        ... on CloudConfigurationRule { id name description serviceType }
        ... on CloudEventRule { id name description }
      }
      entitySnapshot {
        id
        name
        type
        nativeType
        status
        cloudPlatform
        region
        subscriptionName
        subscriptionExternalId
        providerId
        tags
      }
      projects { id name slug businessUnit }
      notes { id text createdAt updatedAt user { name email } }
      serviceTickets { externalId name url }
    }
  }
}`

  const response = await fetch(auth.api_endpoint, {
    method: "POST",
    headers: {
      Authorization: `Bearer ${access_token}`,
      "Content-Type": "application/json",
      Accept: "application/json",
    },
    body: JSON.stringify({
      query,
      variables: {
        first: first ?? 50,
        after: after || null,
        filterBy,
        orderBy: { field: "SEVERITY", direction: "DESC" },
      },
    }),
  })

  if (!response.ok) {
    throw new Error(`${response.status} ${await response.text()}`)
  }

  const result = (await response.json()) as { data?: any; errors?: any }
  if (result.errors) {
    throw new Error(JSON.stringify(result.errors))
  }
  return result.data.issues
}


`1`	`//native`
`2`
`3`	`/**`
`4`	`* List Issues`
`5`	`* List Wiz issues (risks) ordered by severity, with optional filters by severity, status and project. Returns a cursor-paginated page.`
`6`	`*/`
`7`	`export async function main(`
`8`	`auth: RT.Wiz,`
`9`	`severity:`
`10`	`\| ("INFORMATIONAL" \| "LOW" \| "MEDIUM" \| "HIGH" \| "CRITICAL")[]`
`11`	`\| undefined,`
`12`	`status: ("OPEN" \| "IN_PROGRESS" \| "RESOLVED" \| "REJECTED")[] \| undefined,`
`13`	`first: number \| undefined,`
`14`	`after: string \| undefined`
`15`	`) {`
`16`	`const tokenResponse = await fetch(`
`17`	`auth.auth_url \|\| "https://auth.app.wiz.io/oauth/token",`
`18`	`{`
`19`	`method: "POST",`
`20`	`headers: { "Content-Type": "application/x-www-form-urlencoded" },`
`21`	`body: new URLSearchParams({`
`22`	`grant_type: "client_credentials",`
`23`	`audience: auth.audience \|\| "wiz-api",`
`24`	`client_id: auth.client_id,`
`25`	`client_secret: auth.client_secret,`
`26`	`}),`
`27`	`}`
`28`	`)`
`29`	`if (!tokenResponse.ok) {`
`30`	throw new Error(`${tokenResponse.status} ${await tokenResponse.text()}`)
`31`	`}`
`32`	`const { access_token } = (await tokenResponse.json()) as {`
`33`	`access_token: string`
`34`	`}`
`35`
`36`	`const filterBy: { [key: string]: any } = {}`
`37`	`if (severity && severity.length > 0) filterBy.severity = severity`
`38`	`if (status && status.length > 0) filterBy.status = status`
`39`
`40`	const query = `
`41`	`query ListIssues($first: Int, $after: String, $filterBy: IssueFilters, $orderBy: IssueOrder) {`
`42`	`issues: issuesV2(first: $first, after: $after, filterBy: $filterBy, orderBy: $orderBy) {`
`43`	`totalCount`
`44`	`pageInfo { hasNextPage endCursor }`
`45`	`nodes {`
`46`	`id`
`47`	`type`
`48`	`severity`
`49`	`status`
`50`	`createdAt`
`51`	`updatedAt`
`52`	`dueAt`
`53`	`resolvedAt`
`54`	`statusChangedAt`
`55`	`resolutionReason`
`56`	`sourceRule {`
`57`	`__typename`
`58`	`... on Control { id name description }`
`59`	`... on CloudConfigurationRule { id name description serviceType }`
`60`	`... on CloudEventRule { id name description }`
`61`	`}`
`62`	`entitySnapshot {`
`63`	`id`
`64`	`name`
`65`	`type`
`66`	`nativeType`
`67`	`status`
`68`	`cloudPlatform`
`69`	`region`
`70`	`subscriptionName`
`71`	`subscriptionExternalId`
`72`	`providerId`
`73`	`tags`
`74`	`}`
`75`	`projects { id name slug businessUnit }`
`76`	`notes { id text createdAt updatedAt user { name email } }`
`77`	`serviceTickets { externalId name url }`
`78`	`}`
`79`	`}`
`80`	}`
`81`
`82`	`const response = await fetch(auth.api_endpoint, {`
`83`	`method: "POST",`
`84`	`headers: {`
`85`	Authorization: `Bearer ${access_token}`,
`86`	`"Content-Type": "application/json",`
`87`	`Accept: "application/json",`
`88`	`},`
`89`	`body: JSON.stringify({`
`90`	`query,`
`91`	`variables: {`
`92`	`first: first ?? 50,`
`93`	`after: after \|\| null,`
`94`	`filterBy,`
`95`	`orderBy: { field: "SEVERITY", direction: "DESC" },`
`96`	`},`
`97`	`}),`
`98`	`})`
`99`
`100`	`if (!response.ok) {`
`101`	throw new Error(`${response.status} ${await response.text()}`)
`102`	`}`
`103`
`104`	`const result = (await response.json()) as { data?: any; errors?: any }`
`105`	`if (result.errors) {`
`106`	`throw new Error(JSON.stringify(result.errors))`
`107`	`}`
`108`	`return result.data.issues`
`109`	`}`
`110`