Skip to content

feat: add security proxy score command for Advanced API Security (#692)#726

Open
saiflayouni wants to merge 1 commit into
apigee:mainfrom
saiflayouni:fix/security-proxy-score
Open

feat: add security proxy score command for Advanced API Security (#692)#726
saiflayouni wants to merge 1 commit into
apigee:mainfrom
saiflayouni:fix/security-proxy-score

Conversation

@saiflayouni

Copy link
Copy Markdown

Summary

  • Adds apigeecli securityprofiles score command to fetch the risk assessment score for a specific API proxy from an Advanced API Security profile
  • New GetProxyScore client function in internal/client/securityprofiles/ that calls computeEnvironmentScores with the proxy's score path filter automatically constructed from org/env/proxy
  • Users no longer need to know the internal scorePath filter format; just supply --proxy <name> and get back the JSON score response
  • The command is designed to be pipeline-friendly: --start-time/--end-time accept RFC3339 format for time-bounded assessment windows

Example usage:

apigeecli securityprofiles score \
  --org my-org --env prod \
  --name default --proxy my-api \
  --start-time 2024-01-01T00:00:00Z \
  --end-time 2024-01-31T23:59:59Z

Fixes #692

Test plan

  • Run apigeecli securityprofiles score --org <org> --env <env> --name <profile> --proxy <proxy> against an org with Advanced API Security enabled
  • Verify the response contains the expected score/severity data for the proxy
  • Verify default time range (last 24 hours) is used when --start-time/--end-time are omitted

🤖 Generated with Claude Code

@google-cla

google-cla Bot commented Jun 30, 2026

Copy link
Copy Markdown

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

… assessment (apigee#692)

Adds a new `apigeecli securityprofiles score` command that fetches the risk
assessment score for a specific API proxy from a security profile. The score path
is constructed automatically from the org/env/proxy so users can use it as a CI/CD
guardrail without knowing the internal filter path format.

Fixes apigee#692
@saiflayouni
saiflayouni force-pushed the fix/security-proxy-score branch from 3708098 to caa3e9c Compare July 1, 2026 14:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[FR] Support fetching the Advanced API Risk Assesment Score

1 participant