@@ -50318,6 +50318,72 @@ components:
5031850318 required:
5031950319 - name
5032050320 type: object
50321+ LicensesListResponse:
50322+ description: The top-level response object returned by the licenses list endpoint, containing the array of supported SPDX licenses.
50323+ properties:
50324+ data:
50325+ $ref: "#/components/schemas/LicensesListResponseData"
50326+ required:
50327+ - data
50328+ type: object
50329+ LicensesListResponseData:
50330+ description: The data object in a licenses list response, containing the list of SPDX licenses.
50331+ properties:
50332+ attributes:
50333+ $ref: "#/components/schemas/LicensesListResponseDataAttributes"
50334+ id:
50335+ description: The unique identifier for this licenses list response.
50336+ example: 0190a3d4-1234-7000-8000-000000000000
50337+ type: string
50338+ type:
50339+ $ref: "#/components/schemas/LicensesListResponseDataType"
50340+ required:
50341+ - id
50342+ - type
50343+ - attributes
50344+ type: object
50345+ LicensesListResponseDataAttributes:
50346+ description: The attributes of the licenses list response, containing the array of SPDX licenses.
50347+ properties:
50348+ licenses:
50349+ $ref: "#/components/schemas/LicensesListResponseDataAttributesLicenses"
50350+ required:
50351+ - licenses
50352+ type: object
50353+ LicensesListResponseDataAttributesLicenses:
50354+ description: The list of SPDX licenses returned by the API.
50355+ items:
50356+ $ref: "#/components/schemas/LicensesListResponseDataAttributesLicensesItems"
50357+ type: array
50358+ LicensesListResponseDataAttributesLicensesItems:
50359+ description: An SPDX license entry returned by the licenses list endpoint.
50360+ properties:
50361+ display_name:
50362+ description: The human-readable name of the license.
50363+ example: MIT License
50364+ type: string
50365+ identifier:
50366+ description: The SPDX identifier of the license.
50367+ example: MIT
50368+ type: string
50369+ short_name:
50370+ description: The short name of the license, typically matching the SPDX identifier.
50371+ example: MIT
50372+ type: string
50373+ required:
50374+ - display_name
50375+ - identifier
50376+ - short_name
50377+ type: object
50378+ LicensesListResponseDataType:
50379+ default: licenserequest
50380+ description: The type identifier for license list responses.
50381+ enum:
50382+ - licenserequest
50383+ example: licenserequest
50384+ type: string
50385+ x-enum-varnames:
50386+ - LICENSEREQUEST
5032150387 Links:
5032250388 description: The JSON:API links related to pagination.
5032350389 properties:
@@ -53122,6 +53188,144 @@ components:
5312253188 type: string
5312353189 x-enum-varnames:
5312453190 - MANAGED_ORGS
53191+ McpScanRequest:
53192+ description: The top-level request object for submitting an MCP SCA dependency scan.
53193+ properties:
53194+ data:
53195+ $ref: "#/components/schemas/McpScanRequestData"
53196+ required:
53197+ - data
53198+ type: object
53199+ McpScanRequestData:
53200+ description: The data object in an MCP SCA scan request, containing the scan attributes and request type.
53201+ properties:
53202+ attributes:
53203+ $ref: "#/components/schemas/McpScanRequestDataAttributes"
53204+ id:
53205+ description: An optional identifier for this scan request.
53206+ type: string
53207+ type:
53208+ $ref: "#/components/schemas/McpScanRequestDataType"
53209+ required:
53210+ - type
53211+ - attributes
53212+ type: object
53213+ McpScanRequestDataAttributes:
53214+ description: The attributes of an MCP SCA scan request, describing the libraries to scan and their context.
53215+ properties:
53216+ commit_hash:
53217+ description: The commit hash of the source code being scanned.
53218+ example: 0e9fc8de83eaabecd722e1cd0ed44fb489fe15fc
53219+ type: string
53220+ libraries:
53221+ $ref: "#/components/schemas/McpScanRequestDataAttributesLibraries"
53222+ resource_name:
53223+ description: The name of the resource (typically the repository or project name) being scanned.
53224+ example: my-org/my-repo
53225+ type: string
53226+ required:
53227+ - resource_name
53228+ - commit_hash
53229+ - libraries
53230+ type: object
53231+ McpScanRequestDataAttributesLibraries:
53232+ description: The list of libraries to scan for vulnerabilities.
53233+ items:
53234+ $ref: "#/components/schemas/McpScanRequestDataAttributesLibrariesItems"
53235+ type: array
53236+ McpScanRequestDataAttributesLibrariesItems:
53237+ description: A library declaration to include in the dependency scan.
53238+ properties:
53239+ exclusions:
53240+ $ref: "#/components/schemas/McpScanRequestDataAttributesLibrariesItemsExclusions"
53241+ is_dev:
53242+ description: Whether this library is a development-only dependency.
53243+ example: false
53244+ type: boolean
53245+ is_direct:
53246+ description: Whether this library is a direct (rather than transitive) dependency.
53247+ example: true
53248+ type: boolean
53249+ package_manager:
53250+ description: The package manager that produced this library entry (for example, `npm`, `pip`, `nuget`).
53251+ example: nuget
53252+ type: string
53253+ purl:
53254+ description: The Package URL (PURL) uniquely identifying the library and its version.
53255+ example: pkg:nuget/Newtonsoft.Json@13.0.1
53256+ type: string
53257+ target_frameworks:
53258+ $ref: "#/components/schemas/McpScanRequestDataAttributesLibrariesItemsTargetFrameworks"
53259+ required:
53260+ - purl
53261+ - is_dev
53262+ - is_direct
53263+ - package_manager
53264+ type: object
53265+ McpScanRequestDataAttributesLibrariesItemsExclusions:
53266+ description: The list of dependency PURLs to exclude when resolving transitive dependencies for this library.
53267+ items:
53268+ description: A dependency PURL to exclude.
53269+ type: string
53270+ type: array
53271+ McpScanRequestDataAttributesLibrariesItemsTargetFrameworks:
53272+ description: The list of target framework identifiers associated with the library.
53273+ items:
53274+ description: A target framework identifier (for example, `net8.0`).
53275+ type: string
53276+ type: array
53277+ McpScanRequestDataType:
53278+ default: mcpscanrequest
53279+ description: The type identifier for MCP SCA scan requests.
53280+ enum:
53281+ - mcpscanrequest
53282+ example: mcpscanrequest
53283+ type: string
53284+ x-enum-varnames:
53285+ - MCPSCANREQUEST
53286+ McpScanRequestResponse:
53287+ description: The top-level response object returned when an MCP SCA dependency scan request has been accepted.
53288+ properties:
53289+ data:
53290+ $ref: "#/components/schemas/McpScanRequestResponseData"
53291+ required:
53292+ - data
53293+ type: object
53294+ McpScanRequestResponseData:
53295+ description: The data object returned when a scan request has been accepted.
53296+ properties:
53297+ attributes:
53298+ $ref: "#/components/schemas/McpScanRequestResponseDataAttributes"
53299+ id:
53300+ description: The job identifier assigned to the scan.
53301+ example: 0190a3d4-1234-7000-8000-000000000000
53302+ type: string
53303+ type:
53304+ $ref: "#/components/schemas/McpScanRequestResponseDataType"
53305+ required:
53306+ - id
53307+ - type
53308+ - attributes
53309+ type: object
53310+ McpScanRequestResponseDataAttributes:
53311+ description: The attributes returned when a scan request has been accepted, containing the job identifier used to poll for results.
53312+ properties:
53313+ job_id:
53314+ description: The job identifier assigned to the scan, used to retrieve the scan result.
53315+ example: 0190a3d4-1234-7000-8000-000000000000
53316+ type: string
53317+ required:
53318+ - job_id
53319+ type: object
53320+ McpScanRequestResponseDataType:
53321+ default: mcpscanrequestresponse
53322+ description: The type identifier for MCP SCA scan request responses.
53323+ enum:
53324+ - mcpscanrequestresponse
53325+ example: mcpscanrequestresponse
53326+ type: string
53327+ x-enum-varnames:
53328+ - MCPSCANREQUESTRESPONSE
5312553329 MemberTeam:
5312653330 description: A member team
5312753331 properties:
@@ -74996,6 +75200,13 @@ components:
7499675200 type:
7499775201 $ref: "#/components/schemas/ScalarFormulaResponseType"
7499875202 type: object
75203+ ScanResultResponse:
75204+ description: |-
75205+ The raw scan result document produced by the SCA processor.
75206+ The contents reflect the vulnerabilities and metadata produced for the libraries
75207+ submitted in the original scan request.
75208+ oneOf:
75209+ - $ref: "#/components/schemas/AnyValueObject"
7499975210 ScannedAssetMetadata:
7500075211 description: The metadata of a scanned asset.
7500175212 properties:
@@ -164165,6 +164376,138 @@ paths:
164165164376 tags:
164166164377 - Static Analysis
164167164378 x-unstable: "**Note**: This endpoint may be subject to changes."
164379+ /api/v2/static-analysis-sca/dependencies/scan:
164380+ post:
164381+ operationId: CreateSCAScan
164382+ requestBody:
164383+ content:
164384+ application/json:
164385+ examples:
164386+ default:
164387+ value:
164388+ data:
164389+ attributes:
164390+ commit_hash: 0e9fc8de83eaabecd722e1cd0ed44fb489fe15fc
164391+ libraries:
164392+ - exclusions: []
164393+ is_dev: false
164394+ is_direct: true
164395+ package_manager: nuget
164396+ purl: pkg:nuget/Newtonsoft.Json@13.0.1
164397+ target_frameworks:
164398+ - net8.0
164399+ resource_name: my-org/my-repo
164400+ type: mcpscanrequest
164401+ schema:
164402+ $ref: "#/components/schemas/McpScanRequest"
164403+ required: true
164404+ responses:
164405+ "202":
164406+ content:
164407+ application/json:
164408+ examples:
164409+ default:
164410+ value:
164411+ data:
164412+ attributes:
164413+ job_id: 0190a3d4-1234-7000-8000-000000000000
164414+ id: 0190a3d4-1234-7000-8000-000000000000
164415+ type: mcpscanrequestresponse
164416+ schema:
164417+ $ref: "#/components/schemas/McpScanRequestResponse"
164418+ description: Accepted
164419+ "400":
164420+ content:
164421+ application/json:
164422+ schema:
164423+ $ref: "#/components/schemas/JSONAPIErrorResponse"
164424+ description: Bad Request
164425+ "429":
164426+ $ref: "#/components/responses/TooManyRequestsResponse"
164427+ security:
164428+ - apiKeyAuth: []
164429+ appKeyAuth: []
164430+ - AuthZ:
164431+ - code_analysis_read
164432+ summary: Submit libraries for vulnerability scanning
164433+ tags:
164434+ - Static Analysis
164435+ x-unstable: |-
164436+ **Note**: This endpoint is in preview and is subject to change.
164437+ If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).
164438+ /api/v2/static-analysis-sca/dependencies/scan/{job_id}:
164439+ get:
164440+ operationId: GetSCAScan
164441+ parameters:
164442+ - description: The job identifier returned when the scan was submitted.
164443+ in: path
164444+ name: job_id
164445+ required: true
164446+ schema:
164447+ example: 0190a3d4-1234-7000-8000-000000000000
164448+ type: string
164449+ responses:
164450+ "200":
164451+ content:
164452+ application/json:
164453+ examples:
164454+ default:
164455+ value:
164456+ vulnerabilities: []
164457+ schema:
164458+ $ref: "#/components/schemas/ScanResultResponse"
164459+ description: OK
164460+ "404":
164461+ content:
164462+ application/json:
164463+ schema:
164464+ $ref: "#/components/schemas/JSONAPIErrorResponse"
164465+ description: Not Found
164466+ "429":
164467+ $ref: "#/components/responses/TooManyRequestsResponse"
164468+ security:
164469+ - apiKeyAuth: []
164470+ appKeyAuth: []
164471+ - AuthZ:
164472+ - code_analysis_read
164473+ summary: Retrieve a dependency scan result
164474+ tags:
164475+ - Static Analysis
164476+ x-unstable: |-
164477+ **Note**: This endpoint is in preview and is subject to change.
164478+ If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).
164479+ /api/v2/static-analysis-sca/licenses/list:
164480+ get:
164481+ operationId: ListSCALicenses
164482+ responses:
164483+ "200":
164484+ content:
164485+ application/json:
164486+ examples:
164487+ default:
164488+ value:
164489+ data:
164490+ attributes:
164491+ licenses:
164492+ - display_name: MIT License
164493+ identifier: MIT
164494+ short_name: MIT
164495+ id: 0190a3d4-1234-7000-8000-000000000000
164496+ type: licenserequest
164497+ schema:
164498+ $ref: "#/components/schemas/LicensesListResponse"
164499+ description: OK
164500+ "429":
164501+ $ref: "#/components/responses/TooManyRequestsResponse"
164502+ security:
164503+ - apiKeyAuth: []
164504+ appKeyAuth: []
164505+ summary: Get the list of SPDX licenses
164506+ tags:
164507+ - Static Analysis
164508+ x-unstable: |-
164509+ **Note**: This endpoint is in preview and is subject to change.
164510+ If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).
164168164511 /api/v2/static-analysis-sca/vulnerabilities/resolve-vulnerable-symbols:
164169164512 post:
164170164513 operationId: CreateSCAResolveVulnerableSymbols
0 commit comments