@@ -50318,6 +50318,72 @@ components:
5031850318 required:
5031950319 - name
5032050320 type: object
50321+ LicensesListResponse:
50322+ description: The top-level response object returned by the licenses list endpoint, containing the array of supported SPDX licenses.
50323+ properties:
50324+ data:
50325+ $ref: "#/components/schemas/LicensesListResponseData"
50326+ required:
50327+ - data
50328+ type: object
50329+ LicensesListResponseData:
50330+ description: The data object in a licenses list response, containing the list of SPDX licenses.
50331+ properties:
50332+ attributes:
50333+ $ref: "#/components/schemas/LicensesListResponseDataAttributes"
50334+ id:
50335+ description: The unique identifier for this licenses list response.
50336+ example: 0190a3d4-1234-7000-8000-000000000000
50337+ type: string
50338+ type:
50339+ $ref: "#/components/schemas/LicensesListResponseDataType"
50340+ required:
50341+ - id
50342+ - type
50343+ - attributes
50344+ type: object
50345+ LicensesListResponseDataAttributes:
50346+ description: The attributes of the licenses list response, containing the array of SPDX licenses.
50347+ properties:
50348+ licenses:
50349+ $ref: "#/components/schemas/LicensesListResponseDataAttributesLicenses"
50350+ required:
50351+ - licenses
50352+ type: object
50353+ LicensesListResponseDataAttributesLicenses:
50354+ description: The list of SPDX licenses returned by the API.
50355+ items:
50356+ $ref: "#/components/schemas/LicensesListResponseDataAttributesLicensesItems"
50357+ type: array
50358+ LicensesListResponseDataAttributesLicensesItems:
50359+ description: An SPDX license entry returned by the licenses list endpoint.
50360+ properties:
50361+ display_name:
50362+ description: The human-readable name of the license.
50363+ example: MIT License
50364+ type: string
50365+ identifier:
50366+ description: The SPDX identifier of the license.
50367+ example: MIT
50368+ type: string
50369+ short_name:
50370+ description: The short name of the license, typically matching the SPDX identifier.
50371+ example: MIT
50372+ type: string
50373+ required:
50374+ - display_name
50375+ - identifier
50376+ - short_name
50377+ type: object
50378+ LicensesListResponseDataType:
50379+ default: licenserequest
50380+ description: The type identifier for license list responses.
50381+ enum:
50382+ - licenserequest
50383+ example: licenserequest
50384+ type: string
50385+ x-enum-varnames:
50386+ - LICENSEREQUEST
5032150387 Links:
5032250388 description: The JSON:API links related to pagination.
5032350389 properties:
@@ -53122,6 +53188,144 @@ components:
5312253188 type: string
5312353189 x-enum-varnames:
5312453190 - MANAGED_ORGS
53191+ McpScanRequest:
53192+ description: The top-level request object for submitting an MCP SCA dependency scan.
53193+ properties:
53194+ data:
53195+ $ref: "#/components/schemas/McpScanRequestData"
53196+ required:
53197+ - data
53198+ type: object
53199+ McpScanRequestData:
53200+ description: The data object in an MCP SCA scan request, containing the scan attributes and request type.
53201+ properties:
53202+ attributes:
53203+ $ref: "#/components/schemas/McpScanRequestDataAttributes"
53204+ id:
53205+ description: An optional identifier for this scan request.
53206+ type: string
53207+ type:
53208+ $ref: "#/components/schemas/McpScanRequestDataType"
53209+ required:
53210+ - type
53211+ - attributes
53212+ type: object
53213+ McpScanRequestDataAttributes:
53214+ description: The attributes of an MCP SCA scan request, describing the libraries to scan and their context.
53215+ properties:
53216+ commit_hash:
53217+ description: The commit hash of the source code being scanned.
53218+ example: 0e9fc8de83eaabecd722e1cd0ed44fb489fe15fc
53219+ type: string
53220+ libraries:
53221+ $ref: "#/components/schemas/McpScanRequestDataAttributesLibraries"
53222+ resource_name:
53223+ description: The name of the resource (typically the repository or project name) being scanned.
53224+ example: my-org/my-repo
53225+ type: string
53226+ required:
53227+ - resource_name
53228+ - commit_hash
53229+ - libraries
53230+ type: object
53231+ McpScanRequestDataAttributesLibraries:
53232+ description: The list of libraries to scan for vulnerabilities.
53233+ items:
53234+ $ref: "#/components/schemas/McpScanRequestDataAttributesLibrariesItems"
53235+ type: array
53236+ McpScanRequestDataAttributesLibrariesItems:
53237+ description: A library declaration to include in the dependency scan.
53238+ properties:
53239+ exclusions:
53240+ $ref: "#/components/schemas/McpScanRequestDataAttributesLibrariesItemsExclusions"
53241+ is_dev:
53242+ description: Whether this library is a development-only dependency.
53243+ example: false
53244+ type: boolean
53245+ is_direct:
53246+ description: Whether this library is a direct (rather than transitive) dependency.
53247+ example: true
53248+ type: boolean
53249+ package_manager:
53250+ description: The package manager that produced this library entry (for example, `npm`, `pip`, `nuget`).
53251+ example: nuget
53252+ type: string
53253+ purl:
53254+ description: The Package URL (PURL) uniquely identifying the library and its version.
53255+ example: pkg:nuget/Newtonsoft.Json@13.0.1
53256+ type: string
53257+ target_frameworks:
53258+ $ref: "#/components/schemas/McpScanRequestDataAttributesLibrariesItemsTargetFrameworks"
53259+ required:
53260+ - purl
53261+ - is_dev
53262+ - is_direct
53263+ - package_manager
53264+ type: object
53265+ McpScanRequestDataAttributesLibrariesItemsExclusions:
53266+ description: The list of dependency PURLs to exclude when resolving transitive dependencies for this library.
53267+ items:
53268+ description: A dependency PURL to exclude.
53269+ type: string
53270+ type: array
53271+ McpScanRequestDataAttributesLibrariesItemsTargetFrameworks:
53272+ description: The list of target framework identifiers associated with the library.
53273+ items:
53274+ description: A target framework identifier (for example, `net8.0`).
53275+ type: string
53276+ type: array
53277+ McpScanRequestDataType:
53278+ default: mcpscanrequest
53279+ description: The type identifier for MCP SCA scan requests.
53280+ enum:
53281+ - mcpscanrequest
53282+ example: mcpscanrequest
53283+ type: string
53284+ x-enum-varnames:
53285+ - MCPSCANREQUEST
53286+ McpScanRequestResponse:
53287+ description: The top-level response object returned when an MCP SCA dependency scan request has been accepted.
53288+ properties:
53289+ data:
53290+ $ref: "#/components/schemas/McpScanRequestResponseData"
53291+ required:
53292+ - data
53293+ type: object
53294+ McpScanRequestResponseData:
53295+ description: The data object returned when a scan request has been accepted.
53296+ properties:
53297+ attributes:
53298+ $ref: "#/components/schemas/McpScanRequestResponseDataAttributes"
53299+ id:
53300+ description: The job identifier assigned to the scan.
53301+ example: 0190a3d4-1234-7000-8000-000000000000
53302+ type: string
53303+ type:
53304+ $ref: "#/components/schemas/McpScanRequestResponseDataType"
53305+ required:
53306+ - id
53307+ - type
53308+ - attributes
53309+ type: object
53310+ McpScanRequestResponseDataAttributes:
53311+ description: The attributes returned when a scan request has been accepted, containing the job identifier used to poll for results.
53312+ properties:
53313+ job_id:
53314+ description: The job identifier assigned to the scan, used to retrieve the scan result.
53315+ example: 0190a3d4-1234-7000-8000-000000000000
53316+ type: string
53317+ required:
53318+ - job_id
53319+ type: object
53320+ McpScanRequestResponseDataType:
53321+ default: mcpscanrequestresponse
53322+ description: The type identifier for MCP SCA scan request responses.
53323+ enum:
53324+ - mcpscanrequestresponse
53325+ example: mcpscanrequestresponse
53326+ type: string
53327+ x-enum-varnames:
53328+ - MCPSCANREQUESTRESPONSE
5312553329 MemberTeam:
5312653330 description: A member team
5312753331 properties:
@@ -74996,6 +75200,17 @@ components:
7499675200 type:
7499775201 $ref: "#/components/schemas/ScalarFormulaResponseType"
7499875202 type: object
75203+ ScanResultResponse:
75204+ additionalProperties: {}
75205+ description: |-
75206+ The raw scan result document produced by the SCA processor.
75207+ The contents reflect the vulnerabilities and metadata produced for the libraries
75208+ submitted in the original scan request.
75209+ properties:
75210+ test:
75211+ description: test
75212+ type: string
75213+ type: object
7499975214 ScannedAssetMetadata:
7500075215 description: The metadata of a scanned asset.
7500175216 properties:
@@ -164165,6 +164380,138 @@ paths:
164165164380 tags:
164166164381 - Static Analysis
164167164382 x-unstable: "**Note**: This endpoint may be subject to changes."
164383+ /api/v2/static-analysis-sca/dependencies/scan:
164384+ post:
164385+ operationId: CreateSCAScan
164386+ requestBody:
164387+ content:
164388+ application/json:
164389+ examples:
164390+ default:
164391+ value:
164392+ data:
164393+ attributes:
164394+ commit_hash: 0e9fc8de83eaabecd722e1cd0ed44fb489fe15fc
164395+ libraries:
164396+ - exclusions: []
164397+ is_dev: false
164398+ is_direct: true
164399+ package_manager: nuget
164400+ purl: pkg:nuget/Newtonsoft.Json@13.0.1
164401+ target_frameworks:
164402+ - net8.0
164403+ resource_name: my-org/my-repo
164404+ type: mcpscanrequest
164405+ schema:
164406+ $ref: "#/components/schemas/McpScanRequest"
164407+ required: true
164408+ responses:
164409+ "202":
164410+ content:
164411+ application/json:
164412+ examples:
164413+ default:
164414+ value:
164415+ data:
164416+ attributes:
164417+ job_id: 0190a3d4-1234-7000-8000-000000000000
164418+ id: 0190a3d4-1234-7000-8000-000000000000
164419+ type: mcpscanrequestresponse
164420+ schema:
164421+ $ref: "#/components/schemas/McpScanRequestResponse"
164422+ description: Accepted
164423+ "400":
164424+ content:
164425+ application/json:
164426+ schema:
164427+ $ref: "#/components/schemas/JSONAPIErrorResponse"
164428+ description: Bad Request
164429+ "429":
164430+ $ref: "#/components/responses/TooManyRequestsResponse"
164431+ security:
164432+ - apiKeyAuth: []
164433+ appKeyAuth: []
164434+ - AuthZ:
164435+ - code_analysis_read
164436+ summary: Submit libraries for vulnerability scanning
164437+ tags:
164438+ - Static Analysis
164439+ x-unstable: |-
164440+ **Note**: This endpoint is in preview and is subject to change.
164441+ If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).
164442+ /api/v2/static-analysis-sca/dependencies/scan/{job_id}:
164443+ get:
164444+ operationId: GetSCAScan
164445+ parameters:
164446+ - description: The job identifier returned when the scan was submitted.
164447+ in: path
164448+ name: job_id
164449+ required: true
164450+ schema:
164451+ example: 0190a3d4-1234-7000-8000-000000000000
164452+ type: string
164453+ responses:
164454+ "200":
164455+ content:
164456+ application/json:
164457+ examples:
164458+ default:
164459+ value:
164460+ vulnerabilities: []
164461+ schema:
164462+ $ref: "#/components/schemas/ScanResultResponse"
164463+ description: OK
164464+ "404":
164465+ content:
164466+ application/json:
164467+ schema:
164468+ $ref: "#/components/schemas/JSONAPIErrorResponse"
164469+ description: Not Found
164470+ "429":
164471+ $ref: "#/components/responses/TooManyRequestsResponse"
164472+ security:
164473+ - apiKeyAuth: []
164474+ appKeyAuth: []
164475+ - AuthZ:
164476+ - code_analysis_read
164477+ summary: Retrieve a dependency scan result
164478+ tags:
164479+ - Static Analysis
164480+ x-unstable: |-
164481+ **Note**: This endpoint is in preview and is subject to change.
164482+ If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).
164483+ /api/v2/static-analysis-sca/licenses/list:
164484+ get:
164485+ operationId: ListSCALicenses
164486+ responses:
164487+ "200":
164488+ content:
164489+ application/json:
164490+ examples:
164491+ default:
164492+ value:
164493+ data:
164494+ attributes:
164495+ licenses:
164496+ - display_name: MIT License
164497+ identifier: MIT
164498+ short_name: MIT
164499+ id: 0190a3d4-1234-7000-8000-000000000000
164500+ type: licenserequest
164501+ schema:
164502+ $ref: "#/components/schemas/LicensesListResponse"
164503+ description: OK
164504+ "429":
164505+ $ref: "#/components/responses/TooManyRequestsResponse"
164506+ security:
164507+ - apiKeyAuth: []
164508+ appKeyAuth: []
164509+ summary: Get the list of SPDX licenses
164510+ tags:
164511+ - Static Analysis
164512+ x-unstable: |-
164513+ **Note**: This endpoint is in preview and is subject to change.
164514+ If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).
164168164515 /api/v2/static-analysis-sca/vulnerabilities/resolve-vulnerable-symbols:
164169164516 post:
164170164517 operationId: CreateSCAResolveVulnerableSymbols
0 commit comments