Include Extra Data in the Scan¶

Overview¶

When creating a new scan profile, you can include extra assets to be used while scanning the profile's target asset.

Linkage model¶

Under the hood, Escape will keep track of how assets are bound to each other in your ASM, and it will separately keep track of what assets are additionally used in each profile.

Assets definitions¶

In the ASM, it is possible to attach assets as a definition of another asset. This is done by linking the two assets together at the ASM level.

Profile extra Assets¶

A profile is dedicated to scanning a single target asset. This target asset can be defined by multiple different assets, including schemas, related services, code projects, etc.

The profile leverages a subset of the target asset's definition assets, in order to provide additional data to the scan. The extra assets of the profile are cherry picked among the target asset's definition assets.

Bypass¶

Alternatively, you can choose to use all of them, in this case, every future scan of this profile will use all the target asset's definition assets.

Usage in the UI¶

During Profile creation¶

When creating a new scan profile, you can include extra assets to be used while scanning the profile's target asset. You can do so by selecting the assets you want to include in the "Extra Assets" section.

You can also choose to use all the target asset's definition assets by checking the "Use all available extra assets" checkbox.

You can also create assets on the fly from this utility and have them immediately linked to the target asset, and used in the profile.

When creating the profile, you are offered to pick extra assets among all of the target asset's definition assets. To add a displayed asset to the extra assets of the created profile, a switch can be enabled or disabled.

Existing Profile edition¶

On the Profile settings section, it is possible to manage the extra assets of the profile under the "Schemas" section.

All features available during profile creation are also available here. It is also possible to unlink the extra assets from the target asset. This operation will require a confirmation and it will remove the asset from the extra assets of all the profiles scanning the target asset.

Using the API¶

Using the public API, it is possible to include extra assets on a profile by following these steps:

Get Signed URL¶

NOTE: more information about the route here: Get Signed URL

curl https://public.escape.tech/v3/upload/signed-url \
  --request POST \
  --header 'Content-Type: application/json' \
  --header 'Accept: application/json' \
  --header 'X-ESCAPE-API-KEY: <YOUR API KEY>'

you will receive a signed URL and an ID.

  {
    "url":"https://prod-o98rm8s93vx27gtlo82oj782e9tht2eb.s3.us-east-1.amazonaws.com/e2496ad1-c494-4663-91f8-1c4b67ca7f66?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=AKIAXPIWF64NE3EOTRFY%2F20260320%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260320T172601Z&X-Amz-Expires=900&X-Amz-Signature=483d6de10427f145ddc1c7108fcb139767f41de8f74e67292196ff0de64b8a57&X-Amz-SignedHeaders=host&x-amz-checksum-crc32=AAAAAA%3D%3D&x-amz-sdk-checksum-algorithm=CRC32&x-id=PutObject",
    "id":"11111111-1111-1111-1111-111111111111"
  }

Upload the File¶

NOTE: we are using a schema file as an example.

curl -X PUT --data-binary '@./schema.json' "[SIGNED URL]"

Create the Asset¶

NOTE: more information about the route here: Create Schema Asset

Use the id received from the first step as your temporaryObjectKey.

curl https://public.escape.tech/v3/assets/schema \
  --request POST \
  --header 'Content-Type: application/json' \
  --header 'Accept: application/json' \
  --header 'X-ESCAPE-API-KEY: <YOUR API KEY>' \
  --data '{
  "asset_type": "SCHEMA",
  "upload": {
    "temporaryObjectKey": "11111111-1111-1111-1111-111111111111" 
  }
}'

You will receive the newly created asset details in the response, including the permanent asset id:

{
  "id":"99999999-9999-9999-9999-999999999999",
  "class":"SCHEMA",
  "type":"OPENAPI",
  "name":"asset/schema/9999999...",
  ...
  "createdAt":"2026-03-20T17:37:34.028Z",

Attach schemas to a profile¶

NOTE: more information about the route here: Attach Schemas to a Profile

Using the asset id from the previous step, update the profile. You can attach a single asset or multiple assets by passing a list of asset IDs in the extraAssetIds array.

curl https://public.escape.tech/v3/profiles/00000000-0000-0000-0000-000000000000 \
  --request PUT \
  --header 'Content-Type: application/json' \
  --header 'Accept: application/json' \
  --header 'X-ESCAPE-API-KEY: 24505c58-9a40-4cb8-9785-93a6426067a4' \
  --data '{
  "extraAssetIds": [
    "11111111-1111-1111-1111-111111111111",
    "22222222-2222-2222-2222-222222222222",
    "33333333-3333-3333-3333-333333333333"
  ]
}'

Troubleshooting¶

Missing assets in the list¶

If you don't see an asset in the list, it is likely because it is not a definition asset of the target asset. To fix this, you can either create the asset on the fly, or link it to the target asset from the ASM.

It is possible to browse all the assets in the list by clicking on their "See in ASM" button.

Asset creation failure¶

If it is not possible to create an asset from the provided file or asset definition, a card will notify of the error.

The error can be troubleshoot by clicking on the "See details" button.