DevGuard Compliance Components API
A compliance component is a reusable building block that describes one way of satisfying part of a framework control — a control implementation you can point at rather than describe from scratch every time. This API lists the components available on the instance and reads the detail of a single one.
The rest of the endpoints manage compliance statements: the link between a framework control and the component that satisfies it. Creating a statement asserts "this control is addressed by this component here"; updating one revises that claim; deleting one withdraws it.
Statements can be recorded at three levels — organization, project, or asset version — and the same set of operations is available at each. Pick the level the claim genuinely holds at, since a statement made against an organization applies to everything beneath it.
Related Documentation
- Compliance Postures API — the posture these statements contribute to
- Track Compliance Postures — the workflow in the UI
- Compliance API — policy results
- Compliance as Code — the underlying model
- ISO 27001 Mapping — a worked framework mapping
- Use the DevGuard API — authentication and conventions
- DevGuard API Reference