DevGuard Advisories API#

The Advisories API manages the security advisories you publish for your own software. An advisory records a vulnerability that affects your product — as opposed to a vulnerability DevGuard found in one of your dependencies — so that downstream consumers can be told about it.

Advisories are scoped to a single asset version, which means the same product can carry different advisories per branch or tag. Once created, they feed the CSAF documents DevGuard generates, so an advisory written here is what your consumers eventually retrieve.

---

Related Documentation#

• Create Security Advisories — the same workflow in the UI
• CSAF API — how advisories are published to consumers
• CSAF Reports in DevGuard — the distribution structure
• CSAF & VEX Standards — what belongs in an advisory
• Asset Versions API — the scope advisories attach to
• Use the DevGuard API — authentication and conventions
• DevGuard API Reference