swh.web.vulns.api_views module#

swh.web.vulns.api_views.api_revision_vulnerabilities(request: Request, sha1_git: str)[source]#
GET /api/1/revision/(sha1_git)/vulnerabilities/#

Get known vulnerabilities affecting the revision identified by sha1_git.

Status Codes:
Response JSON Array of Objects:
  • vulnerability.ids (array) – array of strings, each of which is an identifier of the vulnerability

  • tool.name (string) – name of the tool used to identify the revision is vulnerable to this vulnerability

  • tool.variant (string) – optional human-readable description of the tool’s configuration

  • source.name (string) – name of the database the vulnerability report comes from

  • source.version (string) – optional date of the database capture

Example:

https://archive.softwareheritage.org/api/1/revision/45a9f284641a23baa142743d8a6136d4e300c465/vulnerabilities/