What is the difference between the '{sonartype_host}/rest/integration/applications/{APPID}/evaluations/ci/stages/{STAGE_ID}?scanType=SONATYPE' interface and the implementation of 'Evaluate a file' in the sonartype lifecycle page?

Sonatype Lifecycle & Repository Firewall
1

Hi nexus team,
Recently, I found that when calling the ‘{sonartype_host}/rest/integration/applications/{APPID}/evaluations/ci/stages/{STAGE_ID}?scanType=SONATYPE’ API to evaluate a file vulnerability, the returned report is different from the result of clicking ‘Evaluate a File’ in the WEB UI.

image
image1338×856 66.5 KB

The number of vulnerability detections in the WEB UI is much less, so I Wondering what is the difference between this API and evaluating a file in the WEB UI.
Looking forward to your reply.