Corgea - Pwnbook Docs

Overview

Corgea is a SAST platform that pairs code vulnerability detection with AI-generated fix suggestions. The Pwnbook integration pulls open findings from Corgea, including which ones have auto-fixes ready, so your team can triage and remediate without switching tools.

Prerequisites

A Corgea account
A Corgea API token
Admin or Owner access in Pwnbook

Setup

1

Generate a Corgea API token

Log in to your Corgea dashboard.
Go to Settings → API Tokens.
Create a new token and copy it.

2

Configure in Pwnbook

Go to Organization Settings → Marketplace → Corgea.
Enter your API Token.
If you’re on a single-tenant Corgea deployment (e.g. https://yourcompany.corgea.app) rather than the shared www.corgea.app, enter it in Instance URL — leave blank otherwise.
Click Save & Test to verify the connection.

What gets synced

Data	Description
SAST findings	Code vulnerabilities with file path and line numbers
AI fix availability	Whether Corgea has generated an auto-fix for the finding
Severity	Critical, High, Medium, Low
Status	Open, in progress, fixed, accepted risk, false positive

Workbench card

The Corgea workbench card shows open findings by severity and how many have AI fixes available — useful for prioritizing quick wins.