@@ -48002,6 +48002,72 @@ components:
4800248002 required:
4800348003 - name
4800448004 type: object
48005+ LicensesListResponse:
48006+ description: The top-level response object returned by the licenses list endpoint, containing the array of supported SPDX licenses.
48007+ properties:
48008+ data:
48009+ $ref: "#/components/schemas/LicensesListResponseData"
48010+ required:
48011+ - data
48012+ type: object
48013+ LicensesListResponseData:
48014+ description: The data object in a licenses list response, containing the list of SPDX licenses.
48015+ properties:
48016+ attributes:
48017+ $ref: "#/components/schemas/LicensesListResponseDataAttributes"
48018+ id:
48019+ description: The unique identifier for this licenses list response.
48020+ example: 0190a3d4-1234-7000-8000-000000000000
48021+ type: string
48022+ type:
48023+ $ref: "#/components/schemas/LicensesListResponseDataType"
48024+ required:
48025+ - id
48026+ - type
48027+ - attributes
48028+ type: object
48029+ LicensesListResponseDataAttributes:
48030+ description: The attributes of the licenses list response, containing the array of SPDX licenses.
48031+ properties:
48032+ licenses:
48033+ $ref: "#/components/schemas/LicensesListResponseDataAttributesLicenses"
48034+ required:
48035+ - licenses
48036+ type: object
48037+ LicensesListResponseDataAttributesLicenses:
48038+ description: The list of SPDX licenses returned by the API.
48039+ items:
48040+ $ref: "#/components/schemas/LicensesListResponseDataAttributesLicensesItems"
48041+ type: array
48042+ LicensesListResponseDataAttributesLicensesItems:
48043+ description: An SPDX license entry returned by the licenses list endpoint.
48044+ properties:
48045+ display_name:
48046+ description: The human-readable name of the license.
48047+ example: MIT License
48048+ type: string
48049+ identifier:
48050+ description: The SPDX identifier of the license.
48051+ example: MIT
48052+ type: string
48053+ short_name:
48054+ description: The short name of the license, typically matching the SPDX identifier.
48055+ example: MIT
48056+ type: string
48057+ required:
48058+ - display_name
48059+ - identifier
48060+ - short_name
48061+ type: object
48062+ LicensesListResponseDataType:
48063+ default: licenserequest
48064+ description: The type identifier for license list responses.
48065+ enum:
48066+ - licenserequest
48067+ example: licenserequest
48068+ type: string
48069+ x-enum-varnames:
48070+ - LICENSEREQUEST
4800548071 Links:
4800648072 description: The JSON:API links related to pagination.
4800748073 properties:
@@ -50672,6 +50738,144 @@ components:
5067250738 type: string
5067350739 x-enum-varnames:
5067450740 - MANAGED_ORGS
50741+ McpScanRequest:
50742+ description: The top-level request object for submitting an MCP SCA dependency scan.
50743+ properties:
50744+ data:
50745+ $ref: "#/components/schemas/McpScanRequestData"
50746+ required:
50747+ - data
50748+ type: object
50749+ McpScanRequestData:
50750+ description: The data object in an MCP SCA scan request, containing the scan attributes and request type.
50751+ properties:
50752+ attributes:
50753+ $ref: "#/components/schemas/McpScanRequestDataAttributes"
50754+ id:
50755+ description: An optional identifier for this scan request.
50756+ type: string
50757+ type:
50758+ $ref: "#/components/schemas/McpScanRequestDataType"
50759+ required:
50760+ - type
50761+ - attributes
50762+ type: object
50763+ McpScanRequestDataAttributes:
50764+ description: The attributes of an MCP SCA scan request, describing the libraries to scan and their context.
50765+ properties:
50766+ commit_hash:
50767+ description: The commit hash of the source code being scanned.
50768+ example: 0e9fc8de83eaabecd722e1cd0ed44fb489fe15fc
50769+ type: string
50770+ libraries:
50771+ $ref: "#/components/schemas/McpScanRequestDataAttributesLibraries"
50772+ resource_name:
50773+ description: The name of the resource (typically the repository or project name) being scanned.
50774+ example: my-org/my-repo
50775+ type: string
50776+ required:
50777+ - resource_name
50778+ - commit_hash
50779+ - libraries
50780+ type: object
50781+ McpScanRequestDataAttributesLibraries:
50782+ description: The list of libraries to scan for vulnerabilities.
50783+ items:
50784+ $ref: "#/components/schemas/McpScanRequestDataAttributesLibrariesItems"
50785+ type: array
50786+ McpScanRequestDataAttributesLibrariesItems:
50787+ description: A library declaration to include in the dependency scan.
50788+ properties:
50789+ exclusions:
50790+ $ref: "#/components/schemas/McpScanRequestDataAttributesLibrariesItemsExclusions"
50791+ is_dev:
50792+ description: Whether this library is a development-only dependency.
50793+ example: false
50794+ type: boolean
50795+ is_direct:
50796+ description: Whether this library is a direct (rather than transitive) dependency.
50797+ example: true
50798+ type: boolean
50799+ package_manager:
50800+ description: The package manager that produced this library entry (for example, `npm`, `pip`, `nuget`).
50801+ example: nuget
50802+ type: string
50803+ purl:
50804+ description: The Package URL (PURL) uniquely identifying the library and its version.
50805+ example: pkg:nuget/Newtonsoft.Json@13.0.1
50806+ type: string
50807+ target_frameworks:
50808+ $ref: "#/components/schemas/McpScanRequestDataAttributesLibrariesItemsTargetFrameworks"
50809+ required:
50810+ - purl
50811+ - is_dev
50812+ - is_direct
50813+ - package_manager
50814+ type: object
50815+ McpScanRequestDataAttributesLibrariesItemsExclusions:
50816+ description: The list of dependency PURLs to exclude when resolving transitive dependencies for this library.
50817+ items:
50818+ description: A dependency PURL to exclude.
50819+ type: string
50820+ type: array
50821+ McpScanRequestDataAttributesLibrariesItemsTargetFrameworks:
50822+ description: The list of target framework identifiers associated with the library.
50823+ items:
50824+ description: A target framework identifier (for example, `net8.0`).
50825+ type: string
50826+ type: array
50827+ McpScanRequestDataType:
50828+ default: mcpscanrequest
50829+ description: The type identifier for MCP SCA scan requests.
50830+ enum:
50831+ - mcpscanrequest
50832+ example: mcpscanrequest
50833+ type: string
50834+ x-enum-varnames:
50835+ - MCPSCANREQUEST
50836+ McpScanRequestResponse:
50837+ description: The top-level response object returned when an MCP SCA dependency scan request has been accepted.
50838+ properties:
50839+ data:
50840+ $ref: "#/components/schemas/McpScanRequestResponseData"
50841+ required:
50842+ - data
50843+ type: object
50844+ McpScanRequestResponseData:
50845+ description: The data object returned when a scan request has been accepted.
50846+ properties:
50847+ attributes:
50848+ $ref: "#/components/schemas/McpScanRequestResponseDataAttributes"
50849+ id:
50850+ description: The job identifier assigned to the scan.
50851+ example: 0190a3d4-1234-7000-8000-000000000000
50852+ type: string
50853+ type:
50854+ $ref: "#/components/schemas/McpScanRequestResponseDataType"
50855+ required:
50856+ - id
50857+ - type
50858+ - attributes
50859+ type: object
50860+ McpScanRequestResponseDataAttributes:
50861+ description: The attributes returned when a scan request has been accepted, containing the job identifier used to poll for results.
50862+ properties:
50863+ job_id:
50864+ description: The job identifier assigned to the scan, used to retrieve the scan result.
50865+ example: 0190a3d4-1234-7000-8000-000000000000
50866+ type: string
50867+ required:
50868+ - job_id
50869+ type: object
50870+ McpScanRequestResponseDataType:
50871+ default: mcpscanrequestresponse
50872+ description: The type identifier for MCP SCA scan request responses.
50873+ enum:
50874+ - mcpscanrequestresponse
50875+ example: mcpscanrequestresponse
50876+ type: string
50877+ x-enum-varnames:
50878+ - MCPSCANREQUESTRESPONSE
5067550879 MemberTeam:
5067650880 description: A member team
5067750881 properties:
@@ -67651,7 +67855,7 @@ components:
6765167855 type: object
6765267856 ResolveVulnerableSymbolsResponseDataType:
6765367857 default: resolve-vulnerable-symbols-response
67654- description: The type identifier for responses containing resolved vulnerable symbols.
67858+ description: The type identifier for responses containing resolved vulnerable symbols
6765567859 enum:
6765667860 - resolve-vulnerable-symbols-response
6765767861 example: resolve-vulnerable-symbols-response
@@ -71369,6 +71573,9 @@ components:
7136971573 type:
7137071574 $ref: "#/components/schemas/ScalarFormulaResponseType"
7137171575 type: object
71576+ ScanResultResponse:
71577+ description: The raw scan result document produced by the SCA processor. The contents reflect the vulnerabilities and metadata produced for the libraries submitted in the original scan request.
71578+ type: object
7137271579 ScannedAssetMetadata:
7137371580 description: The metadata of a scanned asset.
7137471581 properties:
@@ -155905,6 +156112,138 @@ paths:
155905156112 tags:
155906156113 - Static Analysis
155907156114 x-unstable: "**Note**: This endpoint may be subject to changes."
156115+ /api/v2/static-analysis-sca/dependencies/scan:
156116+ post:
156117+ operationId: CreateSCAScan
156118+ requestBody:
156119+ content:
156120+ application/json:
156121+ examples:
156122+ default:
156123+ value:
156124+ data:
156125+ attributes:
156126+ commit_hash: 0e9fc8de83eaabecd722e1cd0ed44fb489fe15fc
156127+ libraries:
156128+ - exclusions: []
156129+ is_dev: false
156130+ is_direct: true
156131+ package_manager: nuget
156132+ purl: pkg:nuget/Newtonsoft.Json@13.0.1
156133+ target_frameworks:
156134+ - net8.0
156135+ resource_name: my-org/my-repo
156136+ type: mcpscanrequest
156137+ schema:
156138+ $ref: "#/components/schemas/McpScanRequest"
156139+ required: true
156140+ responses:
156141+ "202":
156142+ content:
156143+ application/json:
156144+ examples:
156145+ default:
156146+ value:
156147+ data:
156148+ attributes:
156149+ job_id: 0190a3d4-1234-7000-8000-000000000000
156150+ id: 0190a3d4-1234-7000-8000-000000000000
156151+ type: mcpscanrequestresponse
156152+ schema:
156153+ $ref: "#/components/schemas/McpScanRequestResponse"
156154+ description: Accepted
156155+ "400":
156156+ content:
156157+ application/json:
156158+ schema:
156159+ $ref: "#/components/schemas/JSONAPIErrorResponse"
156160+ description: Bad Request
156161+ "429":
156162+ $ref: "#/components/responses/TooManyRequestsResponse"
156163+ security:
156164+ - apiKeyAuth: []
156165+ appKeyAuth: []
156166+ - AuthZ:
156167+ - code_analysis_read
156168+ summary: Submit libraries for vulnerability scanning
156169+ tags:
156170+ - Static Analysis
156171+ x-unstable: |-
156172+ **Note**: This endpoint is in preview and is subject to change.
156173+ If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).
156174+ /api/v2/static-analysis-sca/dependencies/scan/{job_id}:
156175+ get:
156176+ operationId: GetSCAScan
156177+ parameters:
156178+ - description: The job identifier returned when the scan was submitted.
156179+ in: path
156180+ name: job_id
156181+ required: true
156182+ schema:
156183+ example: 0190a3d4-1234-7000-8000-000000000000
156184+ type: string
156185+ responses:
156186+ "200":
156187+ content:
156188+ application/json:
156189+ examples:
156190+ default:
156191+ value:
156192+ vulnerabilities: []
156193+ schema:
156194+ $ref: "#/components/schemas/ScanResultResponse"
156195+ description: OK
156196+ "404":
156197+ content:
156198+ application/json:
156199+ schema:
156200+ $ref: "#/components/schemas/JSONAPIErrorResponse"
156201+ description: Not Found
156202+ "429":
156203+ $ref: "#/components/responses/TooManyRequestsResponse"
156204+ security:
156205+ - apiKeyAuth: []
156206+ appKeyAuth: []
156207+ - AuthZ:
156208+ - code_analysis_read
156209+ summary: Retrieve a dependency scan result
156210+ tags:
156211+ - Static Analysis
156212+ x-unstable: |-
156213+ **Note**: This endpoint is in preview and is subject to change.
156214+ If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).
156215+ /api/v2/static-analysis-sca/licenses/list:
156216+ get:
156217+ operationId: ListSCALicenses
156218+ responses:
156219+ "200":
156220+ content:
156221+ application/json:
156222+ examples:
156223+ default:
156224+ value:
156225+ data:
156226+ attributes:
156227+ licenses:
156228+ - display_name: MIT License
156229+ identifier: MIT
156230+ short_name: MIT
156231+ id: 0190a3d4-1234-7000-8000-000000000000
156232+ type: licenserequest
156233+ schema:
156234+ $ref: "#/components/schemas/LicensesListResponse"
156235+ description: OK
156236+ "429":
156237+ $ref: "#/components/responses/TooManyRequestsResponse"
156238+ security:
156239+ - apiKeyAuth: []
156240+ appKeyAuth: []
156241+ summary: Get the list of SPDX licenses
156242+ tags:
156243+ - Static Analysis
156244+ x-unstable: |-
156245+ **Note**: This endpoint is in preview and is subject to change.
156246+ If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).
155908156247 /api/v2/static-analysis-sca/vulnerabilities/resolve-vulnerable-symbols:
155909156248 post:
155910156249 operationId: CreateSCAResolveVulnerableSymbols
0 commit comments