Update ListAssetsSBOMs spec - require asset_type on first page, add ServerlessFunction asset type (#1813)

Co-authored-by: ci.datadog-api-spec <packages@datadoghq.com>

Author: api-clients-generation-pipeline[bot]

.generator/schemas/v2/openapi.yaml

@@ -10502,6 +10502,7 @@ components:
         - Host
         - HostImage
         - Image
+        - ServerlessFunction
       example: Repository
       type: string
       x-enum-varnames:
@@ -10510,6 +10511,7 @@ components:
         - HOST
         - HOSTIMAGE
         - IMAGE
+        - SERVERLESSFUNCTION
     AssetVersion:
       description: Asset version.
       properties:
@@ -175616,6 +175618,11 @@ paths:
       description: |-
         Get a list of assets SBOMs for an organization.
 
+        The `filter[asset_type]` parameter is required for initial requests (when no `page[token]` is provided).
+        Subsequent pages encode the asset type in the pagination token, so `filter[asset_type]` is not required
+        for paginated requests. Mixing infrastructure asset types (`Host`, `HostImage`, `Image`, `ServerlessFunction`)
+        with code asset types (`Repository`, `Service`) in the same request is not supported and returns a 400 error.
+
         ### Pagination
 
         Please review the [Pagination section](#pagination) for the "List Vulnerabilities" endpoint.
@@ -175645,7 +175652,8 @@ paths:
             format: int64
             minimum: 1
             type: integer
-        - description: The type of the assets for the SBOM request.
+        - description: >-
+            The type of the assets for the SBOM request. Required for initial requests (when no `page[token]` is provided). Infrastructure types (`Host`, `HostImage`, `Image`, `ServerlessFunction`) and code types (`Repository`, `Service`) cannot be mixed in the same request.
           example: Repository
           in: query
           name: filter[asset_type]

src/datadogV2/api/api_security_monitoring.rs

@@ -383,7 +383,7 @@ pub struct ListAssetsSBOMsOptionalParams {
     pub page_token: Option<String>,
     /// The page number to be retrieved. It should be equal to or greater than 1.
     pub page_number: Option<i64>,
-    /// The type of the assets for the SBOM request.
+    /// The type of the assets for the SBOM request. Required for initial requests (when no `page[token]` is provided). Infrastructure types (`Host`, `HostImage`, `Image`, `ServerlessFunction`) and code types (`Repository`, `Service`) cannot be mixed in the same request.
     pub filter_asset_type: Option<crate::datadogV2::model::AssetType>,
     /// The name of the asset for the SBOM request.
     pub filter_asset_name: Option<String>,
@@ -408,7 +408,7 @@ impl ListAssetsSBOMsOptionalParams {
         self.page_number = Some(value);
         self
     }
-    /// The type of the assets for the SBOM request.
+    /// The type of the assets for the SBOM request. Required for initial requests (when no `page[token]` is provided). Infrastructure types (`Host`, `HostImage`, `Image`, `ServerlessFunction`) and code types (`Repository`, `Service`) cannot be mixed in the same request.
     pub fn filter_asset_type(mut self, value: crate::datadogV2::model::AssetType) -> Self {
         self.filter_asset_type = Some(value);
         self
@@ -16650,6 +16650,11 @@ impl SecurityMonitoringAPI {
 
     /// Get a list of assets SBOMs for an organization.
     ///
+    /// The `filter[asset_type]` parameter is required for initial requests (when no `page[token]` is provided).
+    /// Subsequent pages encode the asset type in the pagination token, so `filter[asset_type]` is not required
+    /// for paginated requests. Mixing infrastructure asset types (`Host`, `HostImage`, `Image`, `ServerlessFunction`)
+    /// with code asset types (`Repository`, `Service`) in the same request is not supported and returns a 400 error.
+    ///
     /// ### Pagination
     ///
     /// Please review the [Pagination section](#pagination) for the "List Vulnerabilities" endpoint.
@@ -16684,6 +16689,11 @@ impl SecurityMonitoringAPI {
 
     /// Get a list of assets SBOMs for an organization.
     ///
+    /// The `filter[asset_type]` parameter is required for initial requests (when no `page[token]` is provided).
+    /// Subsequent pages encode the asset type in the pagination token, so `filter[asset_type]` is not required
+    /// for paginated requests. Mixing infrastructure asset types (`Host`, `HostImage`, `Image`, `ServerlessFunction`)
+    /// with code asset types (`Repository`, `Service`) in the same request is not supported and returns a 400 error.
+    ///
     /// ### Pagination
     ///
     /// Please review the [Pagination section](#pagination) for the "List Vulnerabilities" endpoint.

src/datadogV2/model/model_asset_type.rs

@@ -12,6 +12,7 @@ pub enum AssetType {
     HOST,
     HOSTIMAGE,
     IMAGE,
+    SERVERLESSFUNCTION,
     UnparsedObject(crate::datadog::UnparsedObject),
 }
 
@@ -23,6 +24,7 @@ impl ToString for AssetType {
             Self::HOST => String::from("Host"),
             Self::HOSTIMAGE => String::from("HostImage"),
             Self::IMAGE => String::from("Image"),
+            Self::SERVERLESSFUNCTION => String::from("ServerlessFunction"),
             Self::UnparsedObject(v) => v.value.to_string(),
         }
     }
@@ -52,6 +54,7 @@ impl<'de> Deserialize<'de> for AssetType {
             "Host" => Self::HOST,
             "HostImage" => Self::HOSTIMAGE,
             "Image" => Self::IMAGE,
+            "ServerlessFunction" => Self::SERVERLESSFUNCTION,
             _ => Self::UnparsedObject(crate::datadog::UnparsedObject {
                 value: serde_json::Value::String(s.into()),
             }),

tests/scenarios/cassettes/v2/security_monitoring/List-assets-SBOMs-returns-Bad-request-Invalid-pagination-token-response.frozen

@@ -1 +1 @@
-2026-07-06T19:25:16.964Z
+2026-07-07T14:35:06.517Z

tests/scenarios/cassettes/v2/security_monitoring/List-assets-SBOMs-returns-Bad-request-Invalid-pagination-token-response.json

@@ -9,11 +9,11 @@
           ]
         },
         "method": "get",
-        "uri": "https://api.datadoghq.com/api/v2/security/sboms?page%5Btoken%5D=unknown&page%5Bnumber%5D=1"
+        "uri": "https://api.datadoghq.com/api/v2/security/sboms?page%5Btoken%5D=SERVICE%3Aunknown&page%5Bnumber%5D=1"
       },
       "response": {
         "body": {
-          "string": "{\"errors\":[{\"status\":\"400\",\"title\":\"Bad request: asset_type\",\"detail\":\"asset_type filter is required\"}]}",
+          "string": "{\"errors\":[{\"status\":\"400\",\"title\":\"Unexpected internal error\"}]}",
           "encoding": null
         },
         "headers": {
@@ -26,7 +26,7 @@
           "message": "Bad Request"
         }
       },
-      "recorded_at": "Mon, 06 Jul 2026 19:25:16 GMT"
+      "recorded_at": "Tue, 07 Jul 2026 14:35:06 GMT"
     }
   ],
   "recorded_with": "VCR 6.0.0"

tests/scenarios/cassettes/v2/security_monitoring/List-assets-SBOMs-returns-OK-response.frozen

@@ -1 +1 @@
-2026-01-20T08:27:19.760Z
+2026-07-07T14:35:10.638Z

tests/scenarios/cassettes/v2/security_monitoring/List-assets-SBOMs-returns-OK-response.json

@@ -26,7 +26,7 @@
           "message": "OK"
         }
       },
-      "recorded_at": "Tue, 20 Jan 2026 08:27:19 GMT"
+      "recorded_at": "Tue, 07 Jul 2026 14:35:10 GMT"
     }
   ],
   "recorded_with": "VCR 6.0.0"

tests/scenarios/features/v2/security_monitoring.feature

@@ -2369,7 +2369,7 @@ Feature: Security Monitoring
   @team:DataDog/k9-cloud-vm
   Scenario: List assets SBOMs returns "Bad request: Invalid pagination token." response
     Given new "ListAssetsSBOMs" request
-    And request contains "page[token]" parameter with value "unknown"
+    And request contains "page[token]" parameter with value "SERVICE:unknown"
     And request contains "page[number]" parameter with value 1
     When the request is sent
     Then the response status is 400 Bad request: Invalid pagination token.