Extract Compliance results using the Security Compliance Management API

If you have a personal API access token and the correct user permissions, you can use the Security Compliance Management API to extract compliance results from Puppet Security Compliance Management and share those results with your organization’s other third party tooling.

You can extract both summary and raw data results for one, many, or all nodes up to 100,000 nodes. You can also filter results by hostname, node group, environment or operating system.

For information on how to access and use the Security Compliance Management API, reference the documentation at https://<COMPLY-HOSTNAME>/openapi.json, where COMPLY-HOSTNAME is your organization’s Security Compliance Management server hostname. This documentation is in OpenAPI 3.0 format, so you can view it more clearly by importing it into an API documentation tool that supports the format, such as Swagger UI or Postman.