@@ -50304,6 +50304,72 @@ components:
5030450304 required:
5030550305 - name
5030650306 type: object
50307+ LicensesListResponse:
50308+ description: The top-level response object returned by the licenses list endpoint, containing the array of supported SPDX licenses.
50309+ properties:
50310+ data:
50311+ $ref: "#/components/schemas/LicensesListResponseData"
50312+ required:
50313+ - data
50314+ type: object
50315+ LicensesListResponseData:
50316+ description: The data object in a licenses list response, containing the list of SPDX licenses.
50317+ properties:
50318+ attributes:
50319+ $ref: "#/components/schemas/LicensesListResponseDataAttributes"
50320+ id:
50321+ description: The unique identifier for this licenses list response.
50322+ example: 0190a3d4-1234-7000-8000-000000000000
50323+ type: string
50324+ type:
50325+ $ref: "#/components/schemas/LicensesListResponseDataType"
50326+ required:
50327+ - id
50328+ - type
50329+ - attributes
50330+ type: object
50331+ LicensesListResponseDataAttributes:
50332+ description: The attributes of the licenses list response, containing the array of SPDX licenses.
50333+ properties:
50334+ licenses:
50335+ $ref: "#/components/schemas/LicensesListResponseDataAttributesLicenses"
50336+ required:
50337+ - licenses
50338+ type: object
50339+ LicensesListResponseDataAttributesLicenses:
50340+ description: The list of SPDX licenses returned by the API.
50341+ items:
50342+ $ref: "#/components/schemas/LicensesListResponseDataAttributesLicensesItems"
50343+ type: array
50344+ LicensesListResponseDataAttributesLicensesItems:
50345+ description: An SPDX license entry returned by the licenses list endpoint.
50346+ properties:
50347+ display_name:
50348+ description: The human-readable name of the license.
50349+ example: MIT License
50350+ type: string
50351+ identifier:
50352+ description: The SPDX identifier of the license.
50353+ example: MIT
50354+ type: string
50355+ short_name:
50356+ description: The short name of the license, typically matching the SPDX identifier.
50357+ example: MIT
50358+ type: string
50359+ required:
50360+ - display_name
50361+ - identifier
50362+ - short_name
50363+ type: object
50364+ LicensesListResponseDataType:
50365+ default: licenserequest
50366+ description: The type identifier for license list responses.
50367+ enum:
50368+ - licenserequest
50369+ example: licenserequest
50370+ type: string
50371+ x-enum-varnames:
50372+ - LICENSEREQUEST
5030750373 Links:
5030850374 description: The JSON:API links related to pagination.
5030950375 properties:
@@ -53108,6 +53174,144 @@ components:
5310853174 type: string
5310953175 x-enum-varnames:
5311053176 - MANAGED_ORGS
53177+ McpScanRequest:
53178+ description: The top-level request object for submitting an MCP SCA dependency scan.
53179+ properties:
53180+ data:
53181+ $ref: "#/components/schemas/McpScanRequestData"
53182+ required:
53183+ - data
53184+ type: object
53185+ McpScanRequestData:
53186+ description: The data object in an MCP SCA scan request, containing the scan attributes and request type.
53187+ properties:
53188+ attributes:
53189+ $ref: "#/components/schemas/McpScanRequestDataAttributes"
53190+ id:
53191+ description: An optional identifier for this scan request.
53192+ type: string
53193+ type:
53194+ $ref: "#/components/schemas/McpScanRequestDataType"
53195+ required:
53196+ - type
53197+ - attributes
53198+ type: object
53199+ McpScanRequestDataAttributes:
53200+ description: The attributes of an MCP SCA scan request, describing the libraries to scan and their context.
53201+ properties:
53202+ commit_hash:
53203+ description: The commit hash of the source code being scanned.
53204+ example: 0e9fc8de83eaabecd722e1cd0ed44fb489fe15fc
53205+ type: string
53206+ libraries:
53207+ $ref: "#/components/schemas/McpScanRequestDataAttributesLibraries"
53208+ resource_name:
53209+ description: The name of the resource (typically the repository or project name) being scanned.
53210+ example: my-org/my-repo
53211+ type: string
53212+ required:
53213+ - resource_name
53214+ - commit_hash
53215+ - libraries
53216+ type: object
53217+ McpScanRequestDataAttributesLibraries:
53218+ description: The list of libraries to scan for vulnerabilities.
53219+ items:
53220+ $ref: "#/components/schemas/McpScanRequestDataAttributesLibrariesItems"
53221+ type: array
53222+ McpScanRequestDataAttributesLibrariesItems:
53223+ description: A library declaration to include in the dependency scan.
53224+ properties:
53225+ exclusions:
53226+ $ref: "#/components/schemas/McpScanRequestDataAttributesLibrariesItemsExclusions"
53227+ is_dev:
53228+ description: Whether this library is a development-only dependency.
53229+ example: false
53230+ type: boolean
53231+ is_direct:
53232+ description: Whether this library is a direct (rather than transitive) dependency.
53233+ example: true
53234+ type: boolean
53235+ package_manager:
53236+ description: The package manager that produced this library entry (for example, `npm`, `pip`, `nuget`).
53237+ example: nuget
53238+ type: string
53239+ purl:
53240+ description: The Package URL (PURL) uniquely identifying the library and its version.
53241+ example: pkg:nuget/Newtonsoft.Json@13.0.1
53242+ type: string
53243+ target_frameworks:
53244+ $ref: "#/components/schemas/McpScanRequestDataAttributesLibrariesItemsTargetFrameworks"
53245+ required:
53246+ - purl
53247+ - is_dev
53248+ - is_direct
53249+ - package_manager
53250+ type: object
53251+ McpScanRequestDataAttributesLibrariesItemsExclusions:
53252+ description: The list of dependency PURLs to exclude when resolving transitive dependencies for this library.
53253+ items:
53254+ description: A dependency PURL to exclude.
53255+ type: string
53256+ type: array
53257+ McpScanRequestDataAttributesLibrariesItemsTargetFrameworks:
53258+ description: The list of target framework identifiers associated with the library.
53259+ items:
53260+ description: A target framework identifier (for example, `net8.0`).
53261+ type: string
53262+ type: array
53263+ McpScanRequestDataType:
53264+ default: mcpscanrequest
53265+ description: The type identifier for MCP SCA scan requests.
53266+ enum:
53267+ - mcpscanrequest
53268+ example: mcpscanrequest
53269+ type: string
53270+ x-enum-varnames:
53271+ - MCPSCANREQUEST
53272+ McpScanRequestResponse:
53273+ description: The top-level response object returned when an MCP SCA dependency scan request has been accepted.
53274+ properties:
53275+ data:
53276+ $ref: "#/components/schemas/McpScanRequestResponseData"
53277+ required:
53278+ - data
53279+ type: object
53280+ McpScanRequestResponseData:
53281+ description: The data object returned when a scan request has been accepted.
53282+ properties:
53283+ attributes:
53284+ $ref: "#/components/schemas/McpScanRequestResponseDataAttributes"
53285+ id:
53286+ description: The job identifier assigned to the scan.
53287+ example: 0190a3d4-1234-7000-8000-000000000000
53288+ type: string
53289+ type:
53290+ $ref: "#/components/schemas/McpScanRequestResponseDataType"
53291+ required:
53292+ - id
53293+ - type
53294+ - attributes
53295+ type: object
53296+ McpScanRequestResponseDataAttributes:
53297+ description: The attributes returned when a scan request has been accepted, containing the job identifier used to poll for results.
53298+ properties:
53299+ job_id:
53300+ description: The job identifier assigned to the scan, used to retrieve the scan result.
53301+ example: 0190a3d4-1234-7000-8000-000000000000
53302+ type: string
53303+ required:
53304+ - job_id
53305+ type: object
53306+ McpScanRequestResponseDataType:
53307+ default: mcpscanrequestresponse
53308+ description: The type identifier for MCP SCA scan request responses.
53309+ enum:
53310+ - mcpscanrequestresponse
53311+ example: mcpscanrequestresponse
53312+ type: string
53313+ x-enum-varnames:
53314+ - MCPSCANREQUESTRESPONSE
5311153315 MemberTeam:
5311253316 description: A member team
5311353317 properties:
@@ -74765,6 +74969,13 @@ components:
7476574969 type:
7476674970 $ref: "#/components/schemas/ScalarFormulaResponseType"
7476774971 type: object
74972+ ScanResultResponse:
74973+ additionalProperties: {}
74974+ description: |-
74975+ The raw scan result document produced by the SCA processor.
74976+ The contents reflect the vulnerabilities and metadata produced for the libraries
74977+ submitted in the original scan request.
74978+ type: object
7476874979 ScannedAssetMetadata:
7476974980 description: The metadata of a scanned asset.
7477074981 properties:
@@ -163773,6 +163984,138 @@ paths:
163773163984 tags:
163774163985 - Static Analysis
163775163986 x-unstable: "**Note**: This endpoint may be subject to changes."
163987+ /api/v2/static-analysis-sca/dependencies/scan:
163988+ post:
163989+ operationId: CreateSCAScan
163990+ requestBody:
163991+ content:
163992+ application/json:
163993+ examples:
163994+ default:
163995+ value:
163996+ data:
163997+ attributes:
163998+ commit_hash: 0e9fc8de83eaabecd722e1cd0ed44fb489fe15fc
163999+ libraries:
164000+ - exclusions: []
164001+ is_dev: false
164002+ is_direct: true
164003+ package_manager: nuget
164004+ purl: pkg:nuget/Newtonsoft.Json@13.0.1
164005+ target_frameworks:
164006+ - net8.0
164007+ resource_name: my-org/my-repo
164008+ type: mcpscanrequest
164009+ schema:
164010+ $ref: "#/components/schemas/McpScanRequest"
164011+ required: true
164012+ responses:
164013+ "202":
164014+ content:
164015+ application/json:
164016+ examples:
164017+ default:
164018+ value:
164019+ data:
164020+ attributes:
164021+ job_id: 0190a3d4-1234-7000-8000-000000000000
164022+ id: 0190a3d4-1234-7000-8000-000000000000
164023+ type: mcpscanrequestresponse
164024+ schema:
164025+ $ref: "#/components/schemas/McpScanRequestResponse"
164026+ description: Accepted
164027+ "400":
164028+ content:
164029+ application/json:
164030+ schema:
164031+ $ref: "#/components/schemas/JSONAPIErrorResponse"
164032+ description: Bad Request
164033+ "429":
164034+ $ref: "#/components/responses/TooManyRequestsResponse"
164035+ security:
164036+ - apiKeyAuth: []
164037+ appKeyAuth: []
164038+ - AuthZ:
164039+ - code_analysis_read
164040+ summary: Submit libraries for vulnerability scanning
164041+ tags:
164042+ - Static Analysis
164043+ x-unstable: |-
164044+ **Note**: This endpoint is in preview and is subject to change.
164045+ If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).
164046+ /api/v2/static-analysis-sca/dependencies/scan/{job_id}:
164047+ get:
164048+ operationId: GetSCAScan
164049+ parameters:
164050+ - description: The job identifier returned when the scan was submitted.
164051+ in: path
164052+ name: job_id
164053+ required: true
164054+ schema:
164055+ example: 0190a3d4-1234-7000-8000-000000000000
164056+ type: string
164057+ responses:
164058+ "200":
164059+ content:
164060+ application/json:
164061+ examples:
164062+ default:
164063+ value:
164064+ vulnerabilities: []
164065+ schema:
164066+ $ref: "#/components/schemas/ScanResultResponse"
164067+ description: OK
164068+ "404":
164069+ content:
164070+ application/json:
164071+ schema:
164072+ $ref: "#/components/schemas/JSONAPIErrorResponse"
164073+ description: Not Found
164074+ "429":
164075+ $ref: "#/components/responses/TooManyRequestsResponse"
164076+ security:
164077+ - apiKeyAuth: []
164078+ appKeyAuth: []
164079+ - AuthZ:
164080+ - code_analysis_read
164081+ summary: Retrieve a dependency scan result
164082+ tags:
164083+ - Static Analysis
164084+ x-unstable: |-
164085+ **Note**: This endpoint is in preview and is subject to change.
164086+ If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).
164087+ /api/v2/static-analysis-sca/licenses/list:
164088+ get:
164089+ operationId: ListSCALicenses
164090+ responses:
164091+ "200":
164092+ content:
164093+ application/json:
164094+ examples:
164095+ default:
164096+ value:
164097+ data:
164098+ attributes:
164099+ licenses:
164100+ - display_name: MIT License
164101+ identifier: MIT
164102+ short_name: MIT
164103+ id: 0190a3d4-1234-7000-8000-000000000000
164104+ type: licenserequest
164105+ schema:
164106+ $ref: "#/components/schemas/LicensesListResponse"
164107+ description: OK
164108+ "429":
164109+ $ref: "#/components/responses/TooManyRequestsResponse"
164110+ security:
164111+ - apiKeyAuth: []
164112+ appKeyAuth: []
164113+ summary: Get the list of SPDX licenses
164114+ tags:
164115+ - Static Analysis
164116+ x-unstable: |-
164117+ **Note**: This endpoint is in preview and is subject to change.
164118+ If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).
163776164119 /api/v2/static-analysis-sca/vulnerabilities/resolve-vulnerable-symbols:
163777164120 post:
163778164121 operationId: CreateSCAResolveVulnerableSymbols
0 commit comments