Documentation/Prioritize scanner output

Prioritize scanner output

Most scanners produce a flat CVE list. DevSecure Intelligence turns that list into ranked remediation work.

1. Extract CVE IDs

Normalize scanner findings into a unique list of CVE IDs.

CVE-2021-44228
CVE-2020-1472
CVE-2024-3400

2. Submit the list

curl -X POST \
  -H "Authorization: Bearer $DEVSECURE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"cve_ids":["CVE-2021-44228","CVE-2020-1472","CVE-2024-3400"]}' \
  https://api.intelligence.devsecure.io/api/v1/prioritize

For the full schema, see API Reference: POST /api/v1/prioritize.

3. Map the response to work

Use rank_in_request for ordering, priority_band for queue grouping, and recommended_next_step for workflow routing.

4. Re-check missing CVEs

If a submitted CVE appears in not_found, inspect the upstream source record. Some new CVEs may exist upstream before they enter the DevSecure corpus.