Get Dependencies

POST 
/code/api/v1/sbom/dependencies

Get all open-source packages found in your organization's version control system (VCS).

Request

Query Parameters

page doublerequired

Page number to retrieve

limit doublerequired

Amount of dependencies to retrieve

application/json

Body

required

filters objectrequired

cve string[]

CVE-ID

license string[]

License identifier

name string

Package name

origin string[]

Package language framwork/ecosystem

repositoryId string[]

VCS repository ID

riskFactors object

CVE risk factors

attackComplexity string[]

attackVector string[]

containerRunningAsRoot boolean

doS boolean

exploitExists boolean

exploitInTheWild boolean

exploitPOC boolean

hasFix boolean

listeningPorts boolean

noMandatorySecurityProfileApplied boolean

packageInUse boolean

reachableFromInternet boolean

recentVulnerability boolean

remoteExecution boolean

runningAsPrivilegedContainer boolean

severity string[]

CVE severiry based on CVSS score

sourceId string[]

workspaceIds string[]

VCS workspace/integration ID

sortBy SortingOptions (string)

Possible values: [name, version, license, srcCount, cves, maxSeverity]

sortDesc boolean

Responses

200

Got dependencies list

application/json

Schema

Schema

• Array [
cves object[]required
Array [
cvss doublerequired
cvssVectorString stringrequired
description stringrequired
fixedVersion string
id stringrequired
link stringrequired
publishedDate date-timerequired
riskFactors objectrequired
ContainerRunningAsRoot boolean
ExploitExists boolean
ExploitInTheWild boolean
ListeningPorts boolean
NoMandatorySecurityProfileApplied boolean
PackageInUse boolean
ReachableFromInternet boolean
RunningAsPrivilegedContainer boolean
attackComplexity string
attackVector string
doS boolean
exploitPOC boolean
recentVulnerability boolean
remoteExecution boolean
severity stringrequired
summary string
]
id stringrequired
license stringrequired
maxSeverity doublerequired
name stringrequired
origin stringrequired
srcCount doublerequired
version stringrequired
• ]

Example (from schema)

[
  {
    "cves": [
      {
        "cvss": 0,
        "cvssVectorString": "string",
        "description": "string",
        "fixedVersion": "string",
        "id": "string",
        "link": "string",
        "publishedDate": "2024-07-29T15:51:28.071Z",
        "riskFactors": {
          "ContainerRunningAsRoot": true,
          "ExploitExists": true,
          "ExploitInTheWild": true,
          "ListeningPorts": true,
          "NoMandatorySecurityProfileApplied": true,
          "PackageInUse": true,
          "ReachableFromInternet": true,
          "RunningAsPrivilegedContainer": true,
          "attackComplexity": "string",
          "attackVector": "string",
          "doS": true,
          "exploitPOC": true,
          "recentVulnerability": true,
          "remoteExecution": true
        },
        "severity": "string",
        "summary": "string"
      }
    ],
    "id": "string",
    "license": "string",
    "maxSeverity": 0,
    "name": "string",
    "origin": "string",
    "srcCount": 0,
    "version": "string"
  }
]

422

Request arguments validation error

Loading...