Skip to main content
Uploads let you run whitebox pentests against code or documentation that is not connected through an SCM integration. The flow is: request a signed URL, upload the file directly to storage, then finalize.

1. Request a signed upload URL

The response contains an upload_id and a signed url to PUT the file to. category is optional (repository or documentation) and is otherwise inferred. Required scope: uploads:write

2. Upload the file

PUT the raw file bytes to the signed URL returned above:

3. Finalize the upload

Required scope: uploads:write

Delete an upload

Required scope: uploads:write