Security scanning of application program interfaces that are affected by changes to source code

A computer program product for improving computer security, the computer program product comprising a computer readable storage device having program instructions embodied therewith, the program instructions readable and executable by a computer to:

• identify changes in a source code that result in changed code in the source code;
• associate the changed code with affected application program interfaces (APIs) that are used by the changed code;
• manipulate parameters within the affected APIs based on the changes in the source code;
• execute a dynamic security scan on only the affected APIs using the manipulated parameters;
• identify security vulnerabilities in only the affected APIs based on the dynamic security scan;
• and
• modify the source code to remove the security vulnerabilities in only the affected APIs.

A computer system comprising:

• one or more processors;
• one or more computer readable memories, operably coupled to the one or more processors, wherein the one or more computer readable memories store program instructions for execution by at least one of the one or more processors, the stored program instructions comprising:
• program instructions to identify changes in a source code that result in changed code in the source code;
• program instructions to associate the changed code with affected application program interfaces (APIs) that are used by the changed code;
• program instructions to manipulate parameters within the affected APIs based on the changes in the source code;
• program instructions to execute a dynamic security scan on only the affected APIs using the manipulated parameters;
• program instructions to identify security vulnerabilities in only the affected APIs based on the dynamic security scan;
• and
• program instructions to modify the source code to remove the security vulnerabilities in only the affected APIs.