DevGuard VEX Rules API
The DevGuard VEX Rules API lets you define and manage Vulnerability Exploitability eXchange (VEX) rules. A rule pairs a CEL expression with a decision — accept risk or false positive with a mechanical justification — and DevGuard applies it to every matching dependency vulnerability in the asset.
Rules are identified by the combination of asset, CEL expression and source, so there is no update operation: change an expression by deleting the rule and creating a new one. The test endpoint evaluates expressions against the asset's open vulnerabilities without creating anything.
For the concepts and the equivalent web UI flows, see Create & Manage VEX Rules.
Related Documentation
- Create & Manage VEX Rules — the same operations in the web UI
- CEL Expression Reference — every field, function and token available in an expression
- Vulnerabilities API — the findings rules are applied to
- CSAF API — retrieving the documents your decisions produce
- Use the DevGuard API — authentication and conventions
- DevGuard API Reference